I0417 11:32:39.149004 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 11:32:39.149192 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 11:32:39.149279 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 11:32:39.155339 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 11:32:39.155826 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 11:32:39.155921 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 11:32:39.156008 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 11:32:39.158744 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 11:32:39.173885 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 11:32:39.182713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 11:32:39.185982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 11:32:39.189830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 11:32:39.194760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 11:32:39.197251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 11:32:39.199635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 11:32:39.201770 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 11:32:39.201817 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 11:32:39.201848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 11:32:39.204189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 11:32:39.206177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 11:32:39.210734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 11:32:39.215137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 11:32:39.218798 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 11:32:39.218825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 11:32:39.219046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 11:32:39.222648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 11:32:39.225577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 11:32:39.227561 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 11:32:39.227581 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 11:32:39.227621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 11:32:39.229752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 11:32:39.231937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 11:32:39.234378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 11:32:39.236204 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.240413 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.241154 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.241529 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.241789 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.242105 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.242496 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.242565 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.243694 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:32:39.350694 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 11:37:53.594518 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 11:37:53.594467158 +0000 UTC m=+314.482728591 I0417 11:37:54.405295 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 11:37:54.405283038 +0000 UTC m=+315.293544461 I0417 11:37:54.405703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:37:54.405759 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 11:37:54.405752587 +0000 UTC m=+315.294014000 I0417 11:37:54.420466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:54.420523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:37:54.420538 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 11:37:54.420532809 +0000 UTC m=+315.308794212 E0417 11:37:54.421648 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 11:37:54.421694 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 11:37:54.421689952 +0000 UTC m=+315.309951355 E0417 11:37:54.421713 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 11:37:54.434530 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 11:37:54.434662 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 11:37:54.434703 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 11:37:54.434748 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 11:37:54.463469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pdk92" condition "Approved" to 2026-04-17 11:37:54.463457508 +0000 UTC m=+315.351718911 I0417 11:37:54.474066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:54.476529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pdk92" condition "Ready" to 2026-04-17 11:37:54.476523387 +0000 UTC m=+315.364784790 I0417 11:37:54.494736 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:37:54.494726768 +0000 UTC m=+315.382988181 I0417 11:37:54.509909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:54.547666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:59.435987 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:37:59.435961236 +0000 UTC m=+320.324222659 I0417 11:37:59.492434 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 11:37:59.492409893 +0000 UTC m=+320.380671306 I0417 11:37:59.492801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:37:59.492850 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 11:37:59.492840542 +0000 UTC m=+320.381101965 I0417 11:37:59.512002 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 11:37:59.51198294 +0000 UTC m=+320.400244343 I0417 11:37:59.517462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:59.517565 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 11:37:59.517558741 +0000 UTC m=+320.405820144 I0417 11:37:59.642263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:59.684918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv95g" condition "Approved" to 2026-04-17 11:37:59.684897513 +0000 UTC m=+320.573158946 I0417 11:37:59.725129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv95g" condition "Ready" to 2026-04-17 11:37:59.725108309 +0000 UTC m=+320.613369752 I0417 11:37:59.759431 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:37:59.759403168 +0000 UTC m=+320.647664611 I0417 11:37:59.787087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:37:59.849746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.202675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:19.202768 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 11:38:19.202761064 +0000 UTC m=+340.091022467 I0417 11:38:19.202782 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 11:38:19.202769694 +0000 UTC m=+340.091031127 E0417 11:38:19.216548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 11:38:19.216615 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 11:38:19.216605938 +0000 UTC m=+340.104867351 I0417 11:38:19.216675 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 11:38:19.217369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.217436 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 11:38:19.217430224 +0000 UTC m=+340.105691637 E0417 11:38:19.225870 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 11:38:19.226535 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 11:38:19.226584 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 11:38:19.226735 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 11:38:19.235905 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 11:38:19.235893598 +0000 UTC m=+340.124155011 I0417 11:38:19.235978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:19.236013 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 11:38:19.236005472 +0000 UTC m=+340.124266885 I0417 11:38:19.249555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.249667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:19.249703 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 11:38:19.249692451 +0000 UTC m=+340.137953894 I0417 11:38:19.341470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.372719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lhmh4" condition "Approved" to 2026-04-17 11:38:19.372702597 +0000 UTC m=+340.260964010 I0417 11:38:19.402849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lhmh4" condition "Ready" to 2026-04-17 11:38:19.402833573 +0000 UTC m=+340.291094986 I0417 11:38:19.428548 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:19.428527492 +0000 UTC m=+340.316788935 I0417 11:38:19.455528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.455907 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:19.455898574 +0000 UTC m=+340.344159987 I0417 11:38:19.462707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.478563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.482755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.483153 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:19.483145453 +0000 UTC m=+340.371406876 I0417 11:38:19.487071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xfjdc" condition "Approved" to 2026-04-17 11:38:19.48705003 +0000 UTC m=+340.375311473 I0417 11:38:19.503688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xfjdc" condition "Ready" to 2026-04-17 11:38:19.503664559 +0000 UTC m=+340.391925992 I0417 11:38:19.677532 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 11:38:19.67751171 +0000 UTC m=+340.565773123 I0417 11:38:19.677574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:19.677675 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-17 11:38:19.677659293 +0000 UTC m=+340.565920736 I0417 11:38:19.695091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:19.695194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:19.695223 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-17 11:38:19.69521303 +0000 UTC m=+340.583474443 I0417 11:38:19.770256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-h4dsn" condition "Approved" to 2026-04-17 11:38:19.770236275 +0000 UTC m=+340.658497688 I0417 11:38:19.874060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-h4dsn" condition "Ready" to 2026-04-17 11:38:19.87403842 +0000 UTC m=+340.762299853 I0417 11:38:20.313204 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:20.313187043 +0000 UTC m=+341.201448506 I0417 11:38:20.389385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:38:20.389433 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-17 11:38:20.389424192 +0000 UTC m=+341.277685595 I0417 11:38:20.389479 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-17 11:38:20.389452222 +0000 UTC m=+341.277713635 I0417 11:38:20.421469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:20.421809 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:20.421801873 +0000 UTC m=+341.310063286 I0417 11:38:20.664471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:20.664582 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-17 11:38:20.664573108 +0000 UTC m=+341.552834501 I0417 11:38:20.762293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:20.816979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:21.062778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:21.218353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5l78w" condition "Approved" to 2026-04-17 11:38:21.21833527 +0000 UTC m=+342.106596673 I0417 11:38:21.218984 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-17 11:38:21.218964122 +0000 UTC m=+342.107225565 I0417 11:38:21.325876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5l78w" condition "Ready" to 2026-04-17 11:38:21.325863258 +0000 UTC m=+342.214124661 I0417 11:38:21.919551 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:21.919534829 +0000 UTC m=+342.807796242 I0417 11:38:22.019562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:22.032672 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-17 11:38:22.032656119 +0000 UTC m=+342.920917562 I0417 11:38:24.227029 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:24.227017294 +0000 UTC m=+345.115278707 I0417 11:38:24.244217 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-xfjdc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:24.244204884 +0000 UTC m=+345.132466297 I0417 11:38:24.271558 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:38:24.271544665 +0000 UTC m=+345.159806088 I0417 11:38:24.292207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:38:24.345798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:42:15.469388 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready" to 2026-04-17 11:42:15.469338761 +0000 UTC m=+576.357600194 I0417 11:42:15.469641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:42:15.469660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Issuing" to 2026-04-17 11:42:15.469656058 +0000 UTC m=+576.357917471 I0417 11:42:15.489796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:42:15.489861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:42:15.489882 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Issuing" to 2026-04-17 11:42:15.489876159 +0000 UTC m=+576.378137582 I0417 11:42:15.711444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-250.nip.io-tls-swsl8" condition "Approved" to 2026-04-17 11:42:15.711428896 +0000 UTC m=+576.599690309 I0417 11:42:15.731404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-250.nip.io-tls-swsl8" condition "Ready" to 2026-04-17 11:42:15.731384053 +0000 UTC m=+576.619645486 I0417 11:42:15.755481 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:42:15.755469849 +0000 UTC m=+576.643731262 I0417 11:42:15.775417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:42:15.775669 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:42:15.77566345 +0000 UTC m=+576.663924863 I0417 11:42:15.790704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:42:15.790911 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:42:15.790905514 +0000 UTC m=+576.679166927 I0417 11:43:25.626471 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 11:43:25.626445372 +0000 UTC m=+646.514706815 I0417 11:43:25.627312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:43:25.629084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 11:43:25.628994131 +0000 UTC m=+646.517255574 E0417 11:43:25.639329 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 11:43:25.639381 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 11:43:25.639370211 +0000 UTC m=+646.527631654 E0417 11:43:25.639436 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 11:43:25.641159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:43:25.641245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:43:25.641275 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 11:43:25.641265278 +0000 UTC m=+646.529526701 E0417 11:43:25.649748 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 11:43:25.649840 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 11:43:25.649879 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 11:43:25.649910 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 11:43:25.683586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c7lq2" condition "Approved" to 2026-04-17 11:43:25.683571622 +0000 UTC m=+646.571833035 I0417 11:43:25.696571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c7lq2" condition "Ready" to 2026-04-17 11:43:25.696553541 +0000 UTC m=+646.584814974 I0417 11:43:25.719113 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:43:25.719094545 +0000 UTC m=+646.607355988 I0417 11:43:25.739760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:43:25.784353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:43:30.650890 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:43:30.65087082 +0000 UTC m=+651.539132253 I0417 11:44:12.820833 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 11:44:12.820816036 +0000 UTC m=+693.709077449 I0417 11:44:12.820847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.821323 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 11:44:12.821315507 +0000 UTC m=+693.709576920 I0417 11:44:12.821401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.821461 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 11:44:12.821450399 +0000 UTC m=+693.709711832 I0417 11:44:12.821440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 11:44:12.821417899 +0000 UTC m=+693.709679332 I0417 11:44:12.825927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.825998 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 11:44:12.825991746 +0000 UTC m=+693.714253169 I0417 11:44:12.826078 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 11:44:12.826072438 +0000 UTC m=+693.714333841 I0417 11:44:12.874315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:12.889610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.889680 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 11:44:12.889669623 +0000 UTC m=+693.777931026 I0417 11:44:12.902474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:12.902546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.902566 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 11:44:12.902560331 +0000 UTC m=+693.790821724 I0417 11:44:12.902751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:12.902784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:12.902796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 11:44:12.902793975 +0000 UTC m=+693.791055378 I0417 11:44:13.076982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j5xww" condition "Approved" to 2026-04-17 11:44:13.076966048 +0000 UTC m=+693.965227491 I0417 11:44:13.109318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j5xww" condition "Ready" to 2026-04-17 11:44:13.10929979 +0000 UTC m=+693.997561233 I0417 11:44:13.162122 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:13.162111827 +0000 UTC m=+694.050373240 I0417 11:44:13.172034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:13.188276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p4xfd" condition "Approved" to 2026-04-17 11:44:13.18824933 +0000 UTC m=+694.076510773 I0417 11:44:13.200789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:13.209558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p4xfd" condition "Ready" to 2026-04-17 11:44:13.20954973 +0000 UTC m=+694.097811143 I0417 11:44:13.211549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8f9zd" condition "Approved" to 2026-04-17 11:44:13.211535239 +0000 UTC m=+694.099796652 I0417 11:44:13.266353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8f9zd" condition "Ready" to 2026-04-17 11:44:13.266330863 +0000 UTC m=+694.154592276 I0417 11:44:13.606515 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:13.606499923 +0000 UTC m=+694.494761336 I0417 11:44:13.903993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:13.904506 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:13.904497359 +0000 UTC m=+694.792758762 I0417 11:44:13.973973 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:13.973953257 +0000 UTC m=+694.862214660 I0417 11:44:14.203925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:14.204232 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:14.204223179 +0000 UTC m=+695.092484582 I0417 11:44:14.254316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:14.507460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.005401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Ready" to 2026-04-17 11:44:20.005386357 +0000 UTC m=+700.893647760 I0417 11:44:20.005765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:20.005779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Issuing" to 2026-04-17 11:44:20.005776624 +0000 UTC m=+700.894038027 I0417 11:44:20.033343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.033429 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Ready" to 2026-04-17 11:44:20.033421222 +0000 UTC m=+700.921682615 I0417 11:44:20.293358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.329699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nh2hd-cjmpf" condition "Approved" to 2026-04-17 11:44:20.329680957 +0000 UTC m=+701.217942360 I0417 11:44:20.349966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nh2hd-cjmpf" condition "Ready" to 2026-04-17 11:44:20.349946664 +0000 UTC m=+701.238208097 I0417 11:44:20.379089 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:20.37907334 +0000 UTC m=+701.267334743 I0417 11:44:20.401175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.401511 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:20.401501867 +0000 UTC m=+701.289763270 I0417 11:44:20.413430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.417372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:20.417709 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nh2hd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:20.417698907 +0000 UTC m=+701.305960320 I0417 11:44:31.116843 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 11:44:31.116827804 +0000 UTC m=+712.005089217 I0417 11:44:31.116876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:44:31.116920 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 11:44:31.116907216 +0000 UTC m=+712.005168659 I0417 11:44:31.152136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:31.152225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 11:44:31.15221751 +0000 UTC m=+712.040478923 I0417 11:44:31.292544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:44:31.326853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6xdh7" condition "Approved" to 2026-04-17 11:44:31.326840083 +0000 UTC m=+712.215101486 I0417 11:44:31.343877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6xdh7" condition "Ready" to 2026-04-17 11:44:31.343863068 +0000 UTC m=+712.232124481 I0417 11:44:31.376664 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:44:31.376652464 +0000 UTC m=+712.264913877 I0417 11:44:31.400068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:45:53.971914 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 11:45:53.971868182 +0000 UTC m=+794.860129626 I0417 11:45:53.971982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:45:53.972209 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 11:45:53.972194509 +0000 UTC m=+794.860455992 I0417 11:45:53.987607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:45:53.987683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:45:53.987730 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 11:45:53.987723115 +0000 UTC m=+794.875984528 I0417 11:45:54.118043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cq7d2" condition "Approved" to 2026-04-17 11:45:54.11802916 +0000 UTC m=+795.006290573 I0417 11:45:54.143156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cq7d2" condition "Ready" to 2026-04-17 11:45:54.143135889 +0000 UTC m=+795.031397342 I0417 11:45:54.174128 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:45:54.17410742 +0000 UTC m=+795.062368833 I0417 11:45:54.196853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:45:54.197253 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:45:54.197246812 +0000 UTC m=+795.085508225 I0417 11:45:54.204575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:45:54.216272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:43.937672 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 11:46:43.937652705 +0000 UTC m=+844.825914118 I0417 11:46:43.937957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:46:43.938003 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 11:46:43.937993931 +0000 UTC m=+844.826255344 I0417 11:46:43.959759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:43.959893 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 11:46:43.959885248 +0000 UTC m=+844.848146661 I0417 11:46:44.149398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:44.192440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9fmft" condition "Approved" to 2026-04-17 11:46:44.192426076 +0000 UTC m=+845.080687489 I0417 11:46:44.246786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9fmft" condition "Ready" to 2026-04-17 11:46:44.246777181 +0000 UTC m=+845.135038584 I0417 11:46:44.289227 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:46:44.289213209 +0000 UTC m=+845.177474612 I0417 11:46:44.319195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:44.319575 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:46:44.319568537 +0000 UTC m=+845.207829950 I0417 11:46:44.330208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:44.331372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:46:44.331702 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:46:44.331693337 +0000 UTC m=+845.219954750 I0417 11:47:59.972680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:47:59.972724 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-17 11:47:59.972716949 +0000 UTC m=+920.860978362 I0417 11:47:59.972909 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-17 11:47:59.972886452 +0000 UTC m=+920.861147885 I0417 11:47:59.992039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:47:59.992138 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-17 11:47:59.992124757 +0000 UTC m=+920.880386170 I0417 11:48:00.085269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:00.126899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-ktpqf" condition "Approved" to 2026-04-17 11:48:00.126885828 +0000 UTC m=+921.015147231 I0417 11:48:00.144738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-ktpqf" condition "Ready" to 2026-04-17 11:48:00.144726536 +0000 UTC m=+921.032987939 I0417 11:48:00.178490 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:48:00.178473007 +0000 UTC m=+921.066734450 I0417 11:48:00.196629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:00.196929 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:48:00.196922748 +0000 UTC m=+921.085184171 I0417 11:48:00.214534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:00.218245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:49.674458 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 11:48:49.674443628 +0000 UTC m=+970.562705031 I0417 11:48:49.674875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:48:49.674939 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 11:48:49.674925657 +0000 UTC m=+970.563187100 I0417 11:48:49.689655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:49.689738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:48:49.689763 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 11:48:49.689755198 +0000 UTC m=+970.578016641 I0417 11:48:49.996617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:50.028321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-p257d" condition "Approved" to 2026-04-17 11:48:50.028298874 +0000 UTC m=+970.916560317 I0417 11:48:50.122198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-p257d" condition "Ready" to 2026-04-17 11:48:50.122180905 +0000 UTC m=+971.010442348 I0417 11:48:50.153303 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:48:50.153287646 +0000 UTC m=+971.041549049 I0417 11:48:50.175757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:50.176729 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:48:50.176719421 +0000 UTC m=+971.064980834 I0417 11:48:50.186548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:48:50.194844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:49:16.186189 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 11:49:16.186148408 +0000 UTC m=+997.074409821 I0417 11:49:16.186679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:49:16.186698 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 11:49:16.186694289 +0000 UTC m=+997.074955692 I0417 11:49:16.209881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:49:16.209949 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 11:49:16.20994187 +0000 UTC m=+997.098203273 I0417 11:49:16.364937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:49:16.395695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gwngt" condition "Approved" to 2026-04-17 11:49:16.395681965 +0000 UTC m=+997.283943388 I0417 11:49:16.423275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gwngt" condition "Ready" to 2026-04-17 11:49:16.423265009 +0000 UTC m=+997.311526412 I0417 11:49:16.453592 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:49:16.453579975 +0000 UTC m=+997.341841388 I0417 11:49:16.484404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:49:16.484695 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:49:16.484689105 +0000 UTC m=+997.372950518 I0417 11:49:16.507230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:17.953440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:50:17.953471 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-17 11:50:17.953465092 +0000 UTC m=+1058.841726495 I0417 11:50:17.953540 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-17 11:50:17.953515333 +0000 UTC m=+1058.841776756 I0417 11:50:17.971364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:17.971480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:50:17.971513 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-17 11:50:17.971503465 +0000 UTC m=+1058.859764908 I0417 11:50:18.119272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xdnpv" condition "Approved" to 2026-04-17 11:50:18.11925319 +0000 UTC m=+1059.007514623 I0417 11:50:18.135131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xdnpv" condition "Ready" to 2026-04-17 11:50:18.13511899 +0000 UTC m=+1059.023380403 I0417 11:50:18.164075 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:50:18.16406108 +0000 UTC m=+1059.052322493 I0417 11:50:18.188953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:18.243104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:19.255189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:50:19.255374 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-17 11:50:19.255365024 +0000 UTC m=+1060.143626467 I0417 11:50:19.255386 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-17 11:50:19.255366324 +0000 UTC m=+1060.143627737 I0417 11:50:19.270917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:19.271023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:50:19.271146 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-17 11:50:19.271043832 +0000 UTC m=+1060.159305245 I0417 11:50:19.555682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:19.560407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-vzgv8" condition "Approved" to 2026-04-17 11:50:19.560386974 +0000 UTC m=+1060.448648417 I0417 11:50:19.580440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-vzgv8" condition "Ready" to 2026-04-17 11:50:19.580424554 +0000 UTC m=+1060.468685967 I0417 11:50:19.608706 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:50:19.608691091 +0000 UTC m=+1060.496952504 I0417 11:50:19.631926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:19.632687 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:50:19.632499703 +0000 UTC m=+1060.520761116 I0417 11:50:19.650700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:50:19.651109 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:50:19.651099866 +0000 UTC m=+1060.539361269 I0417 11:51:30.048562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:51:30.048612 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-17 11:51:30.048602807 +0000 UTC m=+1130.936864250 I0417 11:51:30.049180 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-17 11:51:30.049159167 +0000 UTC m=+1130.937420610 I0417 11:51:30.067377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:51:30.067818 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-17 11:51:30.0678052 +0000 UTC m=+1130.956066663 I0417 11:51:30.402067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:51:30.433471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5g8j2" condition "Approved" to 2026-04-17 11:51:30.433129507 +0000 UTC m=+1131.321390950 I0417 11:51:30.453232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5g8j2" condition "Ready" to 2026-04-17 11:51:30.453222008 +0000 UTC m=+1131.341483421 I0417 11:51:30.493325 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:51:30.491696866 +0000 UTC m=+1131.379958299 I0417 11:51:30.520312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:51:30.520611 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:51:30.520606184 +0000 UTC m=+1131.408867577 I0417 11:51:30.531063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:51:30.542523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:51:30.542762 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:51:30.542755164 +0000 UTC m=+1131.431016577 I0417 11:52:19.363722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:19.363759 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 11:52:19.363752388 +0000 UTC m=+1180.252013781 I0417 11:52:19.363842 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-17 11:52:19.363835049 +0000 UTC m=+1180.252096452 I0417 11:52:19.400351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:19.400514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:19.400540 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 11:52:19.400534234 +0000 UTC m=+1180.288795627 I0417 11:52:22.019333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-xrttd" condition "Approved" to 2026-04-17 11:52:22.019316359 +0000 UTC m=+1182.907577762 I0417 11:52:22.039271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-xrttd" condition "Ready" to 2026-04-17 11:52:22.039258346 +0000 UTC m=+1182.927519769 I0417 11:52:22.078993 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:22.078980158 +0000 UTC m=+1182.967241561 I0417 11:52:22.107554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:22.108261 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:22.108251123 +0000 UTC m=+1182.996512536 I0417 11:52:22.125911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:22.126958 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:22.126947747 +0000 UTC m=+1183.015209160 I0417 11:52:22.130398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:26.301474 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-17 11:52:26.301461178 +0000 UTC m=+1187.189722581 I0417 11:52:26.331806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:26.331856 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-17 11:52:26.331843294 +0000 UTC m=+1187.220104737 I0417 11:52:26.331922 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 11:52:26.331895765 +0000 UTC m=+1187.220157178 I0417 11:52:26.357668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:26.357760 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 11:52:26.357751714 +0000 UTC m=+1187.246013127 E0417 11:52:26.418732 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" E0417 11:52:26.544521 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0417 11:52:26.705809 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-17 11:52:26.705793064 +0000 UTC m=+1187.594054477 I0417 11:52:26.722457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:26.722504 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-17 11:52:26.72249146 +0000 UTC m=+1187.610752893 I0417 11:52:26.722576 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-17 11:52:26.722563252 +0000 UTC m=+1187.610824665 E0417 11:52:26.726111 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0417 11:52:26.743032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:26.743122 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-17 11:52:26.74311214 +0000 UTC m=+1187.631373583 I0417 11:52:26.879890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:26.927181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qhpzc" condition "Approved" to 2026-04-17 11:52:26.927166735 +0000 UTC m=+1187.815428148 I0417 11:52:26.958184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qhpzc" condition "Ready" to 2026-04-17 11:52:26.958173692 +0000 UTC m=+1187.846435105 I0417 11:52:27.011579 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:27.011567223 +0000 UTC m=+1187.899828636 I0417 11:52:27.032836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:27.104502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:27.594133 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-17 11:52:27.594107253 +0000 UTC m=+1188.482368656 I0417 11:52:27.626648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:27.626692 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-17 11:52:27.62668368 +0000 UTC m=+1188.514945073 I0417 11:52:27.627149 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-17 11:52:27.627128819 +0000 UTC m=+1188.515390262 I0417 11:52:27.643990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:27.644137 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-17 11:52:27.64412419 +0000 UTC m=+1188.532385603 I0417 11:52:27.934589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:27.978924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lnx5b" condition "Approved" to 2026-04-17 11:52:27.978910369 +0000 UTC m=+1188.867171782 I0417 11:52:28.004508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lnx5b" condition "Ready" to 2026-04-17 11:52:28.004499254 +0000 UTC m=+1188.892760667 I0417 11:52:28.053832 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:28.053817777 +0000 UTC m=+1188.942079210 I0417 11:52:28.088679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:28.088947 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:28.088940653 +0000 UTC m=+1188.977202056 I0417 11:52:28.104686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:28.108819 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-17 11:52:28.108792949 +0000 UTC m=+1188.997054352 I0417 11:52:28.143832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:28.143868 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-17 11:52:28.143859872 +0000 UTC m=+1189.032121285 I0417 11:52:28.144262 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-17 11:52:28.14425688 +0000 UTC m=+1189.032518293 I0417 11:52:28.168719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:28.168785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:28.168808 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-17 11:52:28.168801795 +0000 UTC m=+1189.057063228 I0417 11:52:28.473026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6wtgc" condition "Approved" to 2026-04-17 11:52:28.473009465 +0000 UTC m=+1189.361270898 I0417 11:52:28.536848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6wtgc" condition "Ready" to 2026-04-17 11:52:28.536838304 +0000 UTC m=+1189.425099717 I0417 11:52:28.663387 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:28.663367569 +0000 UTC m=+1189.551628982 I0417 11:52:28.752717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:29.095112 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-17 11:52:29.095099123 +0000 UTC m=+1189.983360526 I0417 11:52:29.119417 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-17 11:52:29.119402754 +0000 UTC m=+1190.007664147 I0417 11:52:29.119489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:29.119526 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 11:52:29.119518066 +0000 UTC m=+1190.007779479 I0417 11:52:29.137970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:29.138037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:29.138052 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 11:52:29.138046917 +0000 UTC m=+1190.026308320 I0417 11:52:29.375598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-k8drj" condition "Approved" to 2026-04-17 11:52:29.375585374 +0000 UTC m=+1190.263846777 I0417 11:52:29.405264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-k8drj" condition "Ready" to 2026-04-17 11:52:29.405249536 +0000 UTC m=+1190.293510929 I0417 11:52:29.524355 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:29.524339941 +0000 UTC m=+1190.412601364 I0417 11:52:29.626494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:29.626865 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:29.626854002 +0000 UTC m=+1190.515115415 I0417 11:52:29.821135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:30.458962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:30.458990 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 11:52:30.458985038 +0000 UTC m=+1191.347246431 I0417 11:52:30.459449 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 11:52:30.459442316 +0000 UTC m=+1191.347703719 I0417 11:52:30.483800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:30.483903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:52:30.483927 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 11:52:30.48392045 +0000 UTC m=+1191.372181863 I0417 11:52:30.873124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:52:30.876753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4pv5f" condition "Approved" to 2026-04-17 11:52:30.876741237 +0000 UTC m=+1191.765002640 I0417 11:52:30.897584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4pv5f" condition "Ready" to 2026-04-17 11:52:30.897570191 +0000 UTC m=+1191.785831604 I0417 11:52:30.974552 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:52:30.974539109 +0000 UTC m=+1191.862800512 I0417 11:52:31.071195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:11.153035 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-17 11:55:11.152988343 +0000 UTC m=+1352.041249776 I0417 11:55:11.153136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:11.153201 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 11:55:11.153192797 +0000 UTC m=+1352.041454210 I0417 11:55:11.172321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:11.172436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:11.172459 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 11:55:11.17245234 +0000 UTC m=+1352.060713753 I0417 11:55:11.338151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-h8xhb" condition "Approved" to 2026-04-17 11:55:11.3381406 +0000 UTC m=+1352.226402003 I0417 11:55:11.355907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-h8xhb" condition "Ready" to 2026-04-17 11:55:11.355895215 +0000 UTC m=+1352.244156628 I0417 11:55:11.384559 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:11.384546676 +0000 UTC m=+1352.272808089 I0417 11:55:11.402338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:11.402692 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:11.402683759 +0000 UTC m=+1352.290945172 I0417 11:55:11.428548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:11.431841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:11.432290 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:11.432279727 +0000 UTC m=+1352.320541140 I0417 11:55:12.571356 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-17 11:55:12.571337984 +0000 UTC m=+1353.459599397 I0417 11:55:12.571560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:12.571959 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-17 11:55:12.571944655 +0000 UTC m=+1353.460206108 I0417 11:55:12.589094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:12.589256 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-17 11:55:12.589239291 +0000 UTC m=+1353.477500704 I0417 11:55:12.763205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:12.808811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jjnt6" condition "Approved" to 2026-04-17 11:55:12.808799507 +0000 UTC m=+1353.697060920 I0417 11:55:12.824993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jjnt6" condition "Ready" to 2026-04-17 11:55:12.824985932 +0000 UTC m=+1353.713247345 I0417 11:55:12.858345 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:12.858337252 +0000 UTC m=+1353.746598655 I0417 11:55:12.879888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:40.402246 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-17 11:55:40.40222755 +0000 UTC m=+1381.290488953 I0417 11:55:40.402540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:40.402554 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 11:55:40.402551446 +0000 UTC m=+1381.290812849 I0417 11:55:40.420910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:40.420979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:40.420995 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 11:55:40.420990364 +0000 UTC m=+1381.309251767 I0417 11:55:40.560637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:40.567834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7tfd6" condition "Approved" to 2026-04-17 11:55:40.567818137 +0000 UTC m=+1381.456079550 I0417 11:55:40.596469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7tfd6" condition "Ready" to 2026-04-17 11:55:40.596460717 +0000 UTC m=+1381.484722120 I0417 11:55:40.632266 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:40.632250153 +0000 UTC m=+1381.520511566 I0417 11:55:40.660981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:40.661287 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:40.661279041 +0000 UTC m=+1381.549540444 I0417 11:55:40.678541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:40.678792 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:40.678784671 +0000 UTC m=+1381.567046084 I0417 11:55:42.711794 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-17 11:55:42.711775706 +0000 UTC m=+1383.600037139 I0417 11:55:42.712147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:42.712178 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-17 11:55:42.712171263 +0000 UTC m=+1383.600432676 I0417 11:55:42.736067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:55:42.736373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:55:42.736410 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-17 11:55:42.736402081 +0000 UTC m=+1383.624663494 I0417 11:55:42.932301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-njs26" condition "Approved" to 2026-04-17 11:55:42.932284819 +0000 UTC m=+1383.820546222 I0417 11:55:42.967805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-njs26" condition "Ready" to 2026-04-17 11:55:42.96779171 +0000 UTC m=+1383.856053123 I0417 11:55:43.005088 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:55:43.005020613 +0000 UTC m=+1383.893282026 I0417 11:55:43.028644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:59:21.638981 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-17 11:59:21.638960588 +0000 UTC m=+1602.527222031 I0417 11:59:21.639115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:59:21.639159 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-17 11:59:21.639148001 +0000 UTC m=+1602.527409434 I0417 11:59:21.657168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:59:21.657283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 11:59:21.657314 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-17 11:59:21.657306876 +0000 UTC m=+1602.545568289 I0417 11:59:21.972731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:59:21.987441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7x6vc" condition "Approved" to 2026-04-17 11:59:21.987425559 +0000 UTC m=+1602.875686982 I0417 11:59:22.007254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7x6vc" condition "Ready" to 2026-04-17 11:59:22.007244234 +0000 UTC m=+1602.895505647 I0417 11:59:22.040811 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 11:59:22.040795699 +0000 UTC m=+1602.929057112 I0417 11:59:22.062095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 11:59:22.109521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:17.436930 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-vnc" condition "Ready" to 2026-04-17 12:00:17.436902887 +0000 UTC m=+1658.325164290 I0417 12:00:17.437316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:17.437327 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-vnc" condition "Issuing" to 2026-04-17 12:00:17.437324175 +0000 UTC m=+1658.325585568 I0417 12:00:17.445818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:17.445839 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-api" condition "Issuing" to 2026-04-17 12:00:17.445834936 +0000 UTC m=+1658.334096339 I0417 12:00:17.445854 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-api" condition "Ready" to 2026-04-17 12:00:17.445837206 +0000 UTC m=+1658.334098639 I0417 12:00:17.460199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9czqc-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:17.460271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:17.460286 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-vnc" condition "Issuing" to 2026-04-17 12:00:17.4602813 +0000 UTC m=+1658.348542703 I0417 12:00:17.466850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9czqc-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:17.466950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-9czqc-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:17.466970 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9czqc-api" condition "Issuing" to 2026-04-17 12:00:17.466963946 +0000 UTC m=+1658.355225349 I0417 12:00:17.636041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9czqc-api-rj5ng" condition "Approved" to 2026-04-17 12:00:17.636028139 +0000 UTC m=+1658.524289552 I0417 12:00:17.661504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9czqc-api-rj5ng" condition "Ready" to 2026-04-17 12:00:17.661491281 +0000 UTC m=+1658.549752724 I0417 12:00:17.696677 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9czqc-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:17.696662197 +0000 UTC m=+1658.584923640 I0417 12:00:17.723335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-9czqc-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9czqc-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:17.777113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9czqc-vnc-8zgvm" condition "Approved" to 2026-04-17 12:00:17.777096981 +0000 UTC m=+1658.665358394 I0417 12:00:17.792124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9czqc-vnc-8zgvm" condition "Ready" to 2026-04-17 12:00:17.792112525 +0000 UTC m=+1658.680373938 I0417 12:00:17.829343 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9czqc-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:17.829327841 +0000 UTC m=+1658.717589244 I0417 12:00:17.851564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-9czqc-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9czqc-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:17.853573 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9czqc-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:17.853561669 +0000 UTC m=+1658.741823112 I0417 12:00:17.880521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-9czqc-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9czqc-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:57.655782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:57.655852 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-17 12:00:57.655840265 +0000 UTC m=+1698.544101698 I0417 12:00:57.655854 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-17 12:00:57.655828785 +0000 UTC m=+1698.544090228 E0417 12:00:57.670424 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:57.670461 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-17 12:00:57.670455153 +0000 UTC m=+1698.558716556 I0417 12:00:57.670506 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:57.672987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:57.673167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:57.673224 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-17 12:00:57.673216035 +0000 UTC m=+1698.561477458 E0417 12:00:57.678880 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0417 12:00:57.678972 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:57.678999 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 12:00:57.679041 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0417 12:00:57.715884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:57.719196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-c5dht" condition "Approved" to 2026-04-17 12:00:57.719180105 +0000 UTC m=+1698.607441508 I0417 12:00:57.736865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-c5dht" condition "Ready" to 2026-04-17 12:00:57.73685124 +0000 UTC m=+1698.625112653 I0417 12:00:57.768594 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:57.768579911 +0000 UTC m=+1698.656841314 I0417 12:00:57.793592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:57.793864 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:57.79385648 +0000 UTC m=+1698.682117903 I0417 12:00:57.802257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:57.815010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.398026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:58.398072 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-17 12:00:58.398061584 +0000 UTC m=+1699.286323017 I0417 12:00:58.398315 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 12:00:58.398285348 +0000 UTC m=+1699.286546791 E0417 12:00:58.414548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:58.414584 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-17 12:00:58.414574267 +0000 UTC m=+1699.302835670 I0417 12:00:58.414629 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:58.415310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.415367 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 12:00:58.415362552 +0000 UTC m=+1699.303623955 E0417 12:00:58.425603 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0417 12:00:58.425719 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 12:00:58.425758 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 12:00:58.425784 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0417 12:00:58.433898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.464644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-z9xlx" condition "Approved" to 2026-04-17 12:00:58.464621465 +0000 UTC m=+1699.352882878 I0417 12:00:58.477374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-z9xlx" condition "Ready" to 2026-04-17 12:00:58.477359896 +0000 UTC m=+1699.365621299 I0417 12:00:58.504115 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:58.504106503 +0000 UTC m=+1699.392367906 I0417 12:00:58.534676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.534953 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:58.534946407 +0000 UTC m=+1699.423207820 I0417 12:00:58.542065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.551578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:58.551719 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:00:58.551714085 +0000 UTC m=+1699.439975488 I0417 12:00:59.134643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:00:59.134683 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-17 12:00:59.134676246 +0000 UTC m=+1700.022937659 I0417 12:00:59.134703 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 12:00:59.134695517 +0000 UTC m=+1700.022956920 I0417 12:00:59.149793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:59.149919 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 12:00:59.149907686 +0000 UTC m=+1700.038169129 I0417 12:00:59.167415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:59.167480 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 12:00:59.167474328 +0000 UTC m=+1700.055735731 I0417 12:00:59.167482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:00:59.171290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mvxk2" condition "Approved" to 2026-04-17 12:00:59.17128223 +0000 UTC m=+1700.059543643 I0417 12:00:59.273527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mvxk2" condition "Ready" to 2026-04-17 12:00:59.273511477 +0000 UTC m=+1700.161772920 I0417 12:01:02.680092 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:01:02.680080772 +0000 UTC m=+1703.568342185 I0417 12:01:02.696412 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-mvxk2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:01:02.696400232 +0000 UTC m=+1703.584661665 I0417 12:01:02.730688 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:01:02.730675231 +0000 UTC m=+1703.618936644 I0417 12:01:02.754313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:01:02.754757 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:01:02.754749337 +0000 UTC m=+1703.643010730 I0417 12:01:02.787190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:01:03.426874 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:01:03.426859628 +0000 UTC m=+1704.315121061 I0417 12:04:00.602471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:04:00.602530 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-17 12:04:00.602523789 +0000 UTC m=+1881.490785192 I0417 12:04:00.602855 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-17 12:04:00.602835785 +0000 UTC m=+1881.491097218 I0417 12:04:00.621092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:00.621356 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-17 12:04:00.621343916 +0000 UTC m=+1881.509605349 I0417 12:04:00.713253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:00.742184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6p2pk" condition "Approved" to 2026-04-17 12:04:00.742165234 +0000 UTC m=+1881.630426647 I0417 12:04:00.760719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6p2pk" condition "Ready" to 2026-04-17 12:04:00.760709774 +0000 UTC m=+1881.648971187 I0417 12:04:00.790340 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:04:00.790329315 +0000 UTC m=+1881.678590728 I0417 12:04:00.813976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:00.814670 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:04:00.814661787 +0000 UTC m=+1881.702923190 I0417 12:04:00.838057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:00.838381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:00.839480 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:04:00.839470596 +0000 UTC m=+1881.727732009 I0417 12:04:43.457217 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-17 12:04:43.457203876 +0000 UTC m=+1924.345465279 I0417 12:04:43.457691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:04:43.457994 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-17 12:04:43.457989821 +0000 UTC m=+1924.346251224 I0417 12:04:43.475117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:43.475322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 12:04:43.475375 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-17 12:04:43.4753686 +0000 UTC m=+1924.363630013 I0417 12:04:43.735371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t98tc" condition "Approved" to 2026-04-17 12:04:43.735358753 +0000 UTC m=+1924.623620146 I0417 12:04:43.755313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t98tc" condition "Ready" to 2026-04-17 12:04:43.755303621 +0000 UTC m=+1924.643565024 I0417 12:04:43.792632 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:04:43.792613077 +0000 UTC m=+1924.680874510 I0417 12:04:43.813170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:43.813701 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 12:04:43.813691107 +0000 UTC m=+1924.701952520 I0417 12:04:43.827313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 12:04:43.839219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"