I0414 02:09:09.775732 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 02:09:09.775851 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 02:09:09.775933 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 02:09:09.779304 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 02:09:09.779666 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 02:09:09.779792 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 02:09:09.779802 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 02:09:09.784647 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 02:09:09.799695 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 02:09:09.803127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 02:09:09.803399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 02:09:09.806296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 02:09:09.808665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 02:09:09.810867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 02:09:09.814448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 02:09:09.819025 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 02:09:09.819051 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 02:09:09.819110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 02:09:09.821504 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 02:09:09.821580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 02:09:09.823997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 02:09:09.826582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 02:09:09.828851 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 02:09:09.828966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 02:09:09.831218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 02:09:09.833070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 02:09:09.834796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 02:09:09.840475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 02:09:09.843927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 02:09:09.846332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 02:09:09.848710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 02:09:09.848848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 02:09:09.851801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 02:09:09.854503 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.855042 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.855165 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.855445 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.855658 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.856749 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.857024 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.857247 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.857448 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:09.974480 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 02:09:23.041399 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 02:09:23.04138678 +0000 UTC m=+13.301842245 I0414 02:09:23.836662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:23.836687 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 02:09:23.836669167 +0000 UTC m=+14.097124652 I0414 02:09:23.836716 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 02:09:23.836705098 +0000 UTC m=+14.097160583 E0414 02:09:23.853891 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 02:09:23.853965 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 02:09:23.853957552 +0000 UTC m=+14.114413017 E0414 02:09:23.853996 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 02:09:23.860172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:23.860256 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 02:09:23.860245059 +0000 UTC m=+14.120700514 E0414 02:09:23.874807 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 02:09:23.874875 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 02:09:23.874901 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 02:09:23.874934 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 02:09:23.878246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:23.878289 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 02:09:23.878283492 +0000 UTC m=+14.138738947 I0414 02:09:23.882120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rzrs6" condition "Approved" to 2026-04-14 02:09:23.882107971 +0000 UTC m=+14.142563446 I0414 02:09:23.898533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rzrs6" condition "Ready" to 2026-04-14 02:09:23.898522526 +0000 UTC m=+14.158977991 I0414 02:09:23.921076 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:23.921063314 +0000 UTC m=+14.181518799 I0414 02:09:23.937658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:23.938486 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:23.938480902 +0000 UTC m=+14.198936347 I0414 02:09:23.945478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:23.963673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:28.875774 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:28.875759448 +0000 UTC m=+19.136214903 I0414 02:09:29.121721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:29.121793 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 02:09:29.12176783 +0000 UTC m=+19.382223295 I0414 02:09:29.122425 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 02:09:29.122418395 +0000 UTC m=+19.382873870 I0414 02:09:29.140742 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 02:09:29.140728894 +0000 UTC m=+19.401184349 I0414 02:09:29.148545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:29.148639 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 02:09:29.148629199 +0000 UTC m=+19.409084694 I0414 02:09:29.323289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:29.358685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qdhp7" condition "Approved" to 2026-04-14 02:09:29.358650608 +0000 UTC m=+19.619106073 I0414 02:09:29.398699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qdhp7" condition "Ready" to 2026-04-14 02:09:29.398685186 +0000 UTC m=+19.659140651 I0414 02:09:29.430530 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:29.430518431 +0000 UTC m=+19.690973906 I0414 02:09:29.457065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:29.511459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:33.959135 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-14 02:09:33.959119107 +0000 UTC m=+24.219574572 I0414 02:09:33.959225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:33.959267 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-14 02:09:33.95925755 +0000 UTC m=+24.219713005 E0414 02:09:33.976659 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:09:33.976750 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-14 02:09:33.976739659 +0000 UTC m=+24.237195124 I0414 02:09:33.976806 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:09:33.984617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:33.984717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:33.984759 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-14 02:09:33.984747987 +0000 UTC m=+24.245203482 E0414 02:09:34.040886 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0414 02:09:34.040985 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:09:34.041030 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 02:09:34.041093 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0414 02:09:34.071386 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-14 02:09:34.071371156 +0000 UTC m=+24.331826621 I0414 02:09:34.071541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:34.071607 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-14 02:09:34.071589761 +0000 UTC m=+24.332045256 I0414 02:09:34.089453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:34.089545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:34.089568 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-14 02:09:34.089559462 +0000 UTC m=+24.350014957 I0414 02:09:34.394049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jt5jq" condition "Approved" to 2026-04-14 02:09:34.394018023 +0000 UTC m=+24.654473518 I0414 02:09:34.423918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jt5jq" condition "Ready" to 2026-04-14 02:09:34.423903003 +0000 UTC m=+24.684358468 I0414 02:09:34.468805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:34.468834 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-14 02:09:34.468827425 +0000 UTC m=+24.729282880 I0414 02:09:34.469130 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-14 02:09:34.469126432 +0000 UTC m=+24.729581887 I0414 02:09:34.469613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zphs2" condition "Approved" to 2026-04-14 02:09:34.469607313 +0000 UTC m=+24.730062758 I0414 02:09:34.486240 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:34.486222012 +0000 UTC m=+24.746677477 I0414 02:09:34.494949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zphs2" condition "Ready" to 2026-04-14 02:09:34.494928216 +0000 UTC m=+24.755383711 I0414 02:09:34.500583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:34.500982 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-14 02:09:34.500964197 +0000 UTC m=+24.761419682 I0414 02:09:34.511685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:34.529960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:34.568525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-km54c" condition "Approved" to 2026-04-14 02:09:34.568503969 +0000 UTC m=+24.828959464 I0414 02:09:34.592782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-km54c" condition "Ready" to 2026-04-14 02:09:34.592768128 +0000 UTC m=+24.853223583 I0414 02:09:34.950574 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:34.950557298 +0000 UTC m=+25.211012793 I0414 02:09:35.032746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:35.033133 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:35.033124482 +0000 UTC m=+25.293579947 I0414 02:09:35.212408 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-14 02:09:35.21238489 +0000 UTC m=+25.472840405 I0414 02:09:35.212672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:35.212722 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-14 02:09:35.212715538 +0000 UTC m=+25.473171023 I0414 02:09:35.220441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:35.319491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:35.319581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:09:35.319737 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-14 02:09:35.319591811 +0000 UTC m=+25.580047276 I0414 02:09:35.684946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9xgs7" condition "Approved" to 2026-04-14 02:09:35.684935068 +0000 UTC m=+25.945390523 I0414 02:09:35.792303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9xgs7" condition "Ready" to 2026-04-14 02:09:35.792281292 +0000 UTC m=+26.052736787 I0414 02:09:36.139184 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-14 02:09:36.139167276 +0000 UTC m=+26.399622761 I0414 02:09:36.318836 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:36.318819203 +0000 UTC m=+26.579274718 I0414 02:09:36.468207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:36.468543 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:36.46853492 +0000 UTC m=+26.728990385 I0414 02:09:36.669335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:36.858694 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-14 02:09:36.858674418 +0000 UTC m=+27.119129903 I0414 02:09:39.041968 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:39.041958633 +0000 UTC m=+29.302414108 I0414 02:09:39.054518 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zphs2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:39.054508767 +0000 UTC m=+29.314964212 I0414 02:09:39.090569 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:39.090559181 +0000 UTC m=+29.351014646 I0414 02:09:39.113877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:39.114149 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:39.114142644 +0000 UTC m=+29.374598089 I0414 02:09:39.120851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:39.130615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:09:39.130911 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:09:39.130904356 +0000 UTC m=+29.391359831 I0414 02:09:39.133462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:14:20.893551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:14:20.893595 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-14 02:14:20.893586116 +0000 UTC m=+311.154041611 I0414 02:14:20.893616 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-14 02:14:20.893605547 +0000 UTC m=+311.154061032 I0414 02:14:20.907476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:14:20.907527 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-14 02:14:20.907521683 +0000 UTC m=+311.167977148 I0414 02:14:21.032583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:14:21.061428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-52z92" condition "Approved" to 2026-04-14 02:14:21.061410923 +0000 UTC m=+311.321866408 I0414 02:14:21.077936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-52z92" condition "Ready" to 2026-04-14 02:14:21.07788563 +0000 UTC m=+311.338341095 I0414 02:14:21.114572 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:14:21.11455924 +0000 UTC m=+311.375014695 I0414 02:14:21.135208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:15:32.953117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:15:32.953147 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 02:15:32.953132324 +0000 UTC m=+383.213587809 I0414 02:15:32.953155 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 02:15:32.953147105 +0000 UTC m=+383.213602590 E0414 02:15:32.966180 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 02:15:32.966244 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 02:15:32.966228541 +0000 UTC m=+383.226684046 E0414 02:15:32.966595 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 02:15:32.969214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:15:32.969449 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 02:15:32.969437457 +0000 UTC m=+383.229892942 E0414 02:15:32.978429 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 02:15:32.978611 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 02:15:32.978655 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 02:15:32.978730 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 02:15:32.984921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:15:33.003936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhfqx" condition "Approved" to 2026-04-14 02:15:33.003917984 +0000 UTC m=+383.264373459 I0414 02:15:33.015935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhfqx" condition "Ready" to 2026-04-14 02:15:33.015920545 +0000 UTC m=+383.276376020 I0414 02:15:33.037014 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:15:33.036992559 +0000 UTC m=+383.297448044 I0414 02:15:33.056126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:15:33.056393 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:15:33.056383704 +0000 UTC m=+383.316839169 I0414 02:15:33.073862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:15:37.979807 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:15:37.979796115 +0000 UTC m=+388.240251580 I0414 02:16:21.373633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:21.373664 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 02:16:21.373658435 +0000 UTC m=+431.634113890 I0414 02:16:21.373919 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 02:16:21.373915281 +0000 UTC m=+431.634370736 I0414 02:16:21.385565 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 02:16:21.385552054 +0000 UTC m=+431.646007519 I0414 02:16:21.386581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:21.386649 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 02:16:21.386636039 +0000 UTC m=+431.647091514 I0414 02:16:21.387772 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 02:16:21.387760656 +0000 UTC m=+431.648216131 I0414 02:16:21.388105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:21.388149 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 02:16:21.388138825 +0000 UTC m=+431.648594280 I0414 02:16:21.408122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.408563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:21.408609 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 02:16:21.408595144 +0000 UTC m=+431.669050609 I0414 02:16:21.411926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.411986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:21.412005 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 02:16:21.411999393 +0000 UTC m=+431.672454858 I0414 02:16:21.412470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.413726 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 02:16:21.412521586 +0000 UTC m=+431.672977061 I0414 02:16:21.693301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.734222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mfrdp" condition "Approved" to 2026-04-14 02:16:21.734202393 +0000 UTC m=+431.994657858 I0414 02:16:21.739012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-txpnt" condition "Approved" to 2026-04-14 02:16:21.736426656 +0000 UTC m=+431.996882121 I0414 02:16:21.756624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mfrdp" condition "Ready" to 2026-04-14 02:16:21.756599548 +0000 UTC m=+432.017055033 I0414 02:16:21.757047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-txpnt" condition "Ready" to 2026-04-14 02:16:21.757004657 +0000 UTC m=+432.017460142 I0414 02:16:21.790013 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:21.789999751 +0000 UTC m=+432.050455216 I0414 02:16:21.792915 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:21.792901008 +0000 UTC m=+432.053356493 I0414 02:16:21.813253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.815846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:21.816131 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:21.816123663 +0000 UTC m=+432.076579118 I0414 02:16:21.835911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:22.210766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:22.262334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zmkqn" condition "Approved" to 2026-04-14 02:16:22.262321528 +0000 UTC m=+432.522776983 I0414 02:16:22.316045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zmkqn" condition "Ready" to 2026-04-14 02:16:22.316030226 +0000 UTC m=+432.576485711 I0414 02:16:22.810313 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:22.810286818 +0000 UTC m=+433.070742303 I0414 02:16:22.910147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:22.910599 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:22.910591398 +0000 UTC m=+433.171046873 I0414 02:16:23.106795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:28.627445 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" condition "Ready" to 2026-04-14 02:16:28.62741739 +0000 UTC m=+438.887872885 I0414 02:16:28.627923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:28.627979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" condition "Issuing" to 2026-04-14 02:16:28.627967893 +0000 UTC m=+438.888423348 I0414 02:16:28.649177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:28.649269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:28.649294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" condition "Issuing" to 2026-04-14 02:16:28.649286462 +0000 UTC m=+438.909741927 I0414 02:16:29.147274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kj6x7-mmz2t" condition "Approved" to 2026-04-14 02:16:29.14724575 +0000 UTC m=+439.407701235 I0414 02:16:29.182358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kj6x7-mmz2t" condition "Ready" to 2026-04-14 02:16:29.182345562 +0000 UTC m=+439.442801017 I0414 02:16:29.300523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:29.300505061 +0000 UTC m=+439.560960556 I0414 02:16:29.323363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:29.323820 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:29.323806617 +0000 UTC m=+439.584262092 I0414 02:16:29.352056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:29.353923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kj6x7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:42.168582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:16:42.168654 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 02:16:42.168639997 +0000 UTC m=+452.429095492 I0414 02:16:42.168783 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 02:16:42.16876493 +0000 UTC m=+452.429220415 I0414 02:16:42.191732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:42.191821 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 02:16:42.19181027 +0000 UTC m=+452.452265765 I0414 02:16:42.540580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:16:42.570908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m55q8" condition "Approved" to 2026-04-14 02:16:42.570890202 +0000 UTC m=+452.831345657 I0414 02:16:42.590938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m55q8" condition "Ready" to 2026-04-14 02:16:42.590920772 +0000 UTC m=+452.851376257 I0414 02:16:42.616848 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:16:42.616834759 +0000 UTC m=+452.877290204 I0414 02:16:42.665390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:17:59.489528 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 02:17:59.489511398 +0000 UTC m=+529.749966883 I0414 02:17:59.489690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:17:59.489740 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 02:17:59.489729784 +0000 UTC m=+529.750185269 I0414 02:17:59.505006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:17:59.505078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:17:59.505104 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 02:17:59.505097353 +0000 UTC m=+529.765552848 I0414 02:17:59.885036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7msq9" condition "Approved" to 2026-04-14 02:17:59.885017591 +0000 UTC m=+530.145473086 I0414 02:17:59.901773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7msq9" condition "Ready" to 2026-04-14 02:17:59.901759754 +0000 UTC m=+530.162215239 I0414 02:17:59.923779 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:17:59.923769249 +0000 UTC m=+530.184224704 I0414 02:17:59.941805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:17:59.942091 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:17:59.942082528 +0000 UTC m=+530.202537993 I0414 02:17:59.968239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:18:51.497540 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 02:18:51.497522648 +0000 UTC m=+581.757978103 I0414 02:18:51.497917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:18:51.497934 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 02:18:51.497931168 +0000 UTC m=+581.758386613 I0414 02:18:51.517706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:18:51.517757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:18:51.517769 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 02:18:51.517764312 +0000 UTC m=+581.778219767 I0414 02:18:51.766048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qtr6c" condition "Approved" to 2026-04-14 02:18:51.766032697 +0000 UTC m=+582.026488162 I0414 02:18:51.789288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qtr6c" condition "Ready" to 2026-04-14 02:18:51.789276881 +0000 UTC m=+582.049732326 I0414 02:18:51.829841 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:18:51.829825751 +0000 UTC m=+582.090281226 I0414 02:18:51.863939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:18:51.864346 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:18:51.864336439 +0000 UTC m=+582.124791884 I0414 02:18:51.885366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:19:58.469772 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-14 02:19:58.469750534 +0000 UTC m=+648.730205989 I0414 02:19:58.469970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:19:58.470102 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-14 02:19:58.470092202 +0000 UTC m=+648.730547687 I0414 02:19:58.504719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:19:58.504832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:19:58.504858 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-14 02:19:58.504849396 +0000 UTC m=+648.765304851 I0414 02:19:58.810602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mpp2s" condition "Approved" to 2026-04-14 02:19:58.810589179 +0000 UTC m=+649.071044644 I0414 02:19:58.838365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mpp2s" condition "Ready" to 2026-04-14 02:19:58.838356209 +0000 UTC m=+649.098811664 I0414 02:19:58.871366 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:19:58.871348892 +0000 UTC m=+649.131804347 I0414 02:19:58.897897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:19:58.898214 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:19:58.898209212 +0000 UTC m=+649.158664667 I0414 02:19:58.905295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:19:58.922851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:03.325890 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-14 02:21:03.325872309 +0000 UTC m=+713.586327794 I0414 02:21:03.326104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:21:03.326136 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-14 02:21:03.326129175 +0000 UTC m=+713.586584640 I0414 02:21:03.341910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:03.342032 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-14 02:21:03.342004766 +0000 UTC m=+713.602460231 I0414 02:21:03.712271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:03.747199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xz5cb" condition "Approved" to 2026-04-14 02:21:03.74716544 +0000 UTC m=+714.007621025 I0414 02:21:03.771309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xz5cb" condition "Ready" to 2026-04-14 02:21:03.771299945 +0000 UTC m=+714.031755400 I0414 02:21:03.804366 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:21:03.80435501 +0000 UTC m=+714.064810475 I0414 02:21:03.830534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:03.830816 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:21:03.83081103 +0000 UTC m=+714.091266485 I0414 02:21:03.834045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:03.849355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:30.755193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:21:30.755242 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-14 02:21:30.755231177 +0000 UTC m=+741.015686642 I0414 02:21:30.755459 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-14 02:21:30.755434182 +0000 UTC m=+741.015889637 I0414 02:21:30.769548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:30.769603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:21:30.769619 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-14 02:21:30.769611294 +0000 UTC m=+741.030066759 I0414 02:21:30.920977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:30.932920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mnfvk" condition "Approved" to 2026-04-14 02:21:30.932898039 +0000 UTC m=+741.193353504 I0414 02:21:30.954829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mnfvk" condition "Ready" to 2026-04-14 02:21:30.954815693 +0000 UTC m=+741.215271188 I0414 02:21:30.986555 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:21:30.986538747 +0000 UTC m=+741.246994232 I0414 02:21:31.011299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:31.011582 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:21:31.011575953 +0000 UTC m=+741.272031408 I0414 02:21:31.029237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:21:31.034604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:23.475865 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-14 02:22:23.475836024 +0000 UTC m=+793.736291519 I0414 02:22:23.475939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:22:23.475987 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-14 02:22:23.475973907 +0000 UTC m=+793.736429392 I0414 02:22:23.491894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:23.492005 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-14 02:22:23.491996252 +0000 UTC m=+793.752451717 I0414 02:22:23.900833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:23.934172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nl9x8" condition "Approved" to 2026-04-14 02:22:23.934161582 +0000 UTC m=+794.194617027 I0414 02:22:23.962734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nl9x8" condition "Ready" to 2026-04-14 02:22:23.962724411 +0000 UTC m=+794.223179866 I0414 02:22:23.993364 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:22:23.993349319 +0000 UTC m=+794.253804784 I0414 02:22:24.026460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:24.026903 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:22:24.026893865 +0000 UTC m=+794.287349360 I0414 02:22:24.044256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:24.756116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:22:24.756161 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-14 02:22:24.75615065 +0000 UTC m=+795.016606145 I0414 02:22:24.756381 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-14 02:22:24.756372895 +0000 UTC m=+795.016828360 I0414 02:22:24.774512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:24.774762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:22:24.774806 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-14 02:22:24.774796487 +0000 UTC m=+795.035251982 I0414 02:22:24.963913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:22:24.971733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-svttl" condition "Approved" to 2026-04-14 02:22:24.971722441 +0000 UTC m=+795.232177916 I0414 02:22:24.994810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-svttl" condition "Ready" to 2026-04-14 02:22:24.994800722 +0000 UTC m=+795.255256177 I0414 02:22:25.030837 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:22:25.030826076 +0000 UTC m=+795.291281531 I0414 02:22:25.054209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:23:36.977300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:23:36.977346 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-14 02:23:36.977335113 +0000 UTC m=+867.237790598 I0414 02:23:36.977411 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-14 02:23:36.977393214 +0000 UTC m=+867.237848679 I0414 02:23:36.993666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:23:36.993997 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-14 02:23:36.993979783 +0000 UTC m=+867.254435268 I0414 02:23:37.349658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:23:37.392113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-48pc7" condition "Approved" to 2026-04-14 02:23:37.392097491 +0000 UTC m=+867.652552986 I0414 02:23:37.407825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-48pc7" condition "Ready" to 2026-04-14 02:23:37.407814549 +0000 UTC m=+867.668269994 I0414 02:23:37.431953 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:23:37.431934114 +0000 UTC m=+867.692389599 I0414 02:23:37.452165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:23:37.452464 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:23:37.452441494 +0000 UTC m=+867.712896949 I0414 02:23:37.468408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:23:37.468986 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:23:37.468975152 +0000 UTC m=+867.729430617 I0414 02:24:24.903868 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-14 02:24:24.903853627 +0000 UTC m=+915.164309092 I0414 02:24:24.904208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:24:24.904243 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-14 02:24:24.904236706 +0000 UTC m=+915.164692161 I0414 02:24:24.948532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:24.948753 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-14 02:24:24.948727088 +0000 UTC m=+915.209182573 I0414 02:24:26.152959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:26.198244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8m7wn" condition "Approved" to 2026-04-14 02:24:26.19823062 +0000 UTC m=+916.458686075 I0414 02:24:26.231054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8m7wn" condition "Ready" to 2026-04-14 02:24:26.231044178 +0000 UTC m=+916.491499633 I0414 02:24:26.309302 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:26.309291181 +0000 UTC m=+916.569746626 I0414 02:24:26.347114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:26.347563 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:26.347557917 +0000 UTC m=+916.608013372 I0414 02:24:26.367513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:26.368291 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:26.368280452 +0000 UTC m=+916.628735917 I0414 02:24:36.720558 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-14 02:24:36.720534432 +0000 UTC m=+926.980989977 I0414 02:24:36.720646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:24:36.720703 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-14 02:24:36.720687015 +0000 UTC m=+926.981142560 I0414 02:24:36.759112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:36.759208 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-14 02:24:36.759200447 +0000 UTC m=+927.019655912 I0414 02:24:36.873584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:36.916493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xgxmm" condition "Approved" to 2026-04-14 02:24:36.916473711 +0000 UTC m=+927.176929226 I0414 02:24:36.954512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xgxmm" condition "Ready" to 2026-04-14 02:24:36.954498321 +0000 UTC m=+927.214953786 I0414 02:24:36.993807 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:36.993792291 +0000 UTC m=+927.254247756 I0414 02:24:37.013763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:37.014295 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:37.014286611 +0000 UTC m=+927.274742096 I0414 02:24:37.037113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:24:37.037460 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:24:37.037454794 +0000 UTC m=+927.297910249 I0414 02:27:10.525541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:27:10.525619 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-14 02:27:10.525609103 +0000 UTC m=+1080.786064588 I0414 02:27:10.525684 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-14 02:27:10.525666645 +0000 UTC m=+1080.786122140 I0414 02:27:10.541446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:10.541550 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-14 02:27:10.541539017 +0000 UTC m=+1080.801994502 I0414 02:27:10.772846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:10.807948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bsnzz" condition "Approved" to 2026-04-14 02:27:10.807933604 +0000 UTC m=+1081.068389069 I0414 02:27:10.825786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bsnzz" condition "Ready" to 2026-04-14 02:27:10.825766242 +0000 UTC m=+1081.086221727 I0414 02:27:10.857009 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:27:10.856944782 +0000 UTC m=+1081.117400247 I0414 02:27:10.876494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:11.967517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:27:11.967559 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-14 02:27:11.967552246 +0000 UTC m=+1082.228007701 I0414 02:27:11.967785 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-14 02:27:11.967767391 +0000 UTC m=+1082.228222866 I0414 02:27:11.987308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:11.987389 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-14 02:27:11.98738205 +0000 UTC m=+1082.247837515 I0414 02:27:12.247972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:12.301160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4dp6z" condition "Approved" to 2026-04-14 02:27:12.301140867 +0000 UTC m=+1082.561596342 I0414 02:27:12.347511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4dp6z" condition "Ready" to 2026-04-14 02:27:12.347495822 +0000 UTC m=+1082.607951277 I0414 02:27:12.411767 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:27:12.411747957 +0000 UTC m=+1082.672203422 I0414 02:27:12.442971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:27:12.443359 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:27:12.443350777 +0000 UTC m=+1082.703806232 I0414 02:27:12.488062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:30:36.917170 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-14 02:30:36.91715652 +0000 UTC m=+1287.177611975 I0414 02:30:36.917143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:30:36.917316 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-14 02:30:36.917306514 +0000 UTC m=+1287.177761989 I0414 02:30:36.934908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:30:36.934996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:30:36.935065 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-14 02:30:36.93505423 +0000 UTC m=+1287.195509725 I0414 02:30:37.405256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:30:37.419099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lpx2x" condition "Approved" to 2026-04-14 02:30:37.419087933 +0000 UTC m=+1287.679543388 I0414 02:30:37.435898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lpx2x" condition "Ready" to 2026-04-14 02:30:37.435885196 +0000 UTC m=+1287.696340661 I0414 02:30:37.460763 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:30:37.460753369 +0000 UTC m=+1287.721208844 I0414 02:30:37.479962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:30:37.480340 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:30:37.480334127 +0000 UTC m=+1287.740789592 I0414 02:30:37.496372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:30:37.496701 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:30:37.496693461 +0000 UTC m=+1287.757148926 I0414 02:30:37.497687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.402431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6j7tk-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:31:29.402527 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-api" condition "Issuing" to 2026-04-14 02:31:29.402517227 +0000 UTC m=+1339.662972692 I0414 02:31:29.403228 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-api" condition "Ready" to 2026-04-14 02:31:29.403221334 +0000 UTC m=+1339.663676799 I0414 02:31:29.403565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6j7tk-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:31:29.403614 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Issuing" to 2026-04-14 02:31:29.403608783 +0000 UTC m=+1339.664064248 I0414 02:31:29.404040 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Ready" to 2026-04-14 02:31:29.404032863 +0000 UTC m=+1339.664488328 I0414 02:31:29.422286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6j7tk-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.422374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6j7tk-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:31:29.422391 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Issuing" to 2026-04-14 02:31:29.422385932 +0000 UTC m=+1339.682841387 I0414 02:31:29.423029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-6j7tk-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.423106 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6j7tk-api" condition "Ready" to 2026-04-14 02:31:29.423062108 +0000 UTC m=+1339.683517563 I0414 02:31:29.675930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-6j7tk-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.685071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6j7tk-vnc-cpnpj" condition "Approved" to 2026-04-14 02:31:29.685061052 +0000 UTC m=+1339.945516517 I0414 02:31:29.707582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6j7tk-vnc-cpnpj" condition "Ready" to 2026-04-14 02:31:29.707570679 +0000 UTC m=+1339.968026134 I0414 02:31:29.740806 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:31:29.740794347 +0000 UTC m=+1340.001249802 I0414 02:31:29.742284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-6j7tk-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.763459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-6j7tk-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.763834 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:31:29.763826157 +0000 UTC m=+1340.024281622 I0414 02:31:29.775863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-6j7tk-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.776617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6j7tk-api-j4xrw" condition "Approved" to 2026-04-14 02:31:29.776588935 +0000 UTC m=+1340.037044400 I0414 02:31:29.785245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-6j7tk-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:31:29.791992 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6j7tk-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:31:29.791977546 +0000 UTC m=+1340.052433011 I0414 02:31:29.808846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6j7tk-api-j4xrw" condition "Ready" to 2026-04-14 02:31:29.80883157 +0000 UTC m=+1340.069287035 I0414 02:31:29.863953 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6j7tk-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:31:29.86393306 +0000 UTC m=+1340.124388545 I0414 02:31:29.892906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-6j7tk-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6j7tk-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:57.379549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:33:57.379633 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-14 02:33:57.379623924 +0000 UTC m=+1487.640079409 I0414 02:33:57.379591 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-14 02:33:57.379577383 +0000 UTC m=+1487.640032878 I0414 02:33:57.401586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:57.401661 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-14 02:33:57.40165354 +0000 UTC m=+1487.662109015 E0414 02:33:57.409868 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:33:57.409933 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-14 02:33:57.409925704 +0000 UTC m=+1487.670381179 I0414 02:33:57.409956 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 02:33:57.422380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0414 02:33:57.422498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" E0414 02:33:57.422972 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:33:57.423007 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 02:33:57.423024 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0414 02:33:57.447285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6drv6" condition "Approved" to 2026-04-14 02:33:57.447272678 +0000 UTC m=+1487.707728153 I0414 02:33:57.465811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6drv6" condition "Ready" to 2026-04-14 02:33:57.465802932 +0000 UTC m=+1487.726258387 I0414 02:33:57.494551 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:33:57.494540395 +0000 UTC m=+1487.754995870 I0414 02:33:57.529743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:57.530034 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:33:57.530028226 +0000 UTC m=+1487.790483691 I0414 02:33:57.553423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:57.553722 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:33:57.553713991 +0000 UTC m=+1487.814169446 I0414 02:33:58.102416 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-14 02:33:58.102400822 +0000 UTC m=+1488.362856287 I0414 02:33:58.102547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:33:58.102586 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-14 02:33:58.102578246 +0000 UTC m=+1488.363033711 E0414 02:33:58.112652 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:33:58.112730 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-14 02:33:58.112722474 +0000 UTC m=+1488.373177939 I0414 02:33:58.112752 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:33:58.122364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.122472 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-14 02:33:58.122457972 +0000 UTC m=+1488.382913457 E0414 02:33:58.124708 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0414 02:33:58.128203 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 02:33:58.128244 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 02:33:58.128298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0414 02:33:58.152321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.190297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9tkv5" condition "Approved" to 2026-04-14 02:33:58.190285961 +0000 UTC m=+1488.450741416 I0414 02:33:58.206782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9tkv5" condition "Ready" to 2026-04-14 02:33:58.206772537 +0000 UTC m=+1488.467227982 I0414 02:33:58.234295 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:33:58.234283851 +0000 UTC m=+1488.494739296 I0414 02:33:58.257039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.307614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.937319 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 02:33:58.937307307 +0000 UTC m=+1489.197762752 I0414 02:33:58.937336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:33:58.937362 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-14 02:33:58.937354768 +0000 UTC m=+1489.197810263 I0414 02:33:58.955132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.955224 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 02:33:58.955214786 +0000 UTC m=+1489.215670281 I0414 02:33:58.983426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.983557 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 02:33:58.983530459 +0000 UTC m=+1489.243985914 I0414 02:33:58.987511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:33:58.995032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-597jn" condition "Approved" to 2026-04-14 02:33:58.995019158 +0000 UTC m=+1489.255474623 I0414 02:33:59.013660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-597jn" condition "Ready" to 2026-04-14 02:33:59.013648265 +0000 UTC m=+1489.274103730 I0414 02:34:02.423283 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:34:02.423273281 +0000 UTC m=+1492.683728746 I0414 02:34:02.436236 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-597jn" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:34:02.436211044 +0000 UTC m=+1492.696666509 I0414 02:34:02.466240 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:34:02.466223087 +0000 UTC m=+1492.726678552 I0414 02:34:02.498127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:34:03.125779 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:34:03.125760915 +0000 UTC m=+1493.386216410 I0414 02:35:30.602373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:35:30.602408 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 02:35:30.60240162 +0000 UTC m=+1580.862857075 I0414 02:35:30.603022 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-14 02:35:30.603002384 +0000 UTC m=+1580.863457869 I0414 02:35:30.621196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:35:30.621358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 02:35:30.621410 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 02:35:30.621402575 +0000 UTC m=+1580.881858020 I0414 02:35:30.774353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-f8ncf" condition "Approved" to 2026-04-14 02:35:30.774335617 +0000 UTC m=+1581.034791112 I0414 02:35:30.795736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-f8ncf" condition "Ready" to 2026-04-14 02:35:30.795724488 +0000 UTC m=+1581.056179953 I0414 02:35:30.823617 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:35:30.823608011 +0000 UTC m=+1581.084063476 I0414 02:35:30.843565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 02:35:30.843879 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 02:35:30.843868926 +0000 UTC m=+1581.104324401 I0414 02:35:30.863243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"