I0627 05:44:44.610130 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0627 05:44:44.610275 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0627 05:44:44.610352 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0627 05:44:44.614981 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0627 05:44:44.615385 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0627 05:44:44.615472 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0627 05:44:44.615644 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0627 05:44:44.617544 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0627 05:44:44.633271 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0627 05:44:44.633580 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0627 05:44:44.637378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0627 05:44:44.642210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0627 05:44:44.647100 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0627 05:44:44.647135 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0627 05:44:44.647181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0627 05:44:44.649778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0627 05:44:44.652343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0627 05:44:44.654935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0627 05:44:44.656862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0627 05:44:44.658514 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0627 05:44:44.658535 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0627 05:44:44.658571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0627 05:44:44.661940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0627 05:44:44.666755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0627 05:44:44.669865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0627 05:44:44.672695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0627 05:44:44.675399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0627 05:44:44.677297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0627 05:44:44.679139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0627 05:44:44.680922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0627 05:44:44.682957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0627 05:44:44.685019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0627 05:44:44.686684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0627 05:44:44.686776 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.691188 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.692462 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.710002 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.726899 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.743087 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.759711 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.775931 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.794515 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:44.805138 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0627 05:44:57.881995 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-27 05:44:57.881976696 +0000 UTC m=+13.310377766 I0627 05:44:58.636617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:44:58.636682 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-27 05:44:58.636676044 +0000 UTC m=+14.065077064 I0627 05:44:58.636785 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-27 05:44:58.636767547 +0000 UTC m=+14.065168667 E0627 05:44:58.648954 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0627 05:44:58.649054 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-27 05:44:58.649043635 +0000 UTC m=+14.077444705 E0627 05:44:58.649087 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0627 05:44:58.651282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:44:58.651394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:44:58.651433 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-27 05:44:58.651416765 +0000 UTC m=+14.079817805 E0627 05:44:58.662711 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0627 05:44:58.662900 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0627 05:44:58.663014 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0627 05:44:58.663106 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0627 05:44:58.689158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:44:58.699029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rrdgj" condition "Approved" to 2026-06-27 05:44:58.69901209 +0000 UTC m=+14.127413130 I0627 05:44:58.740820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rrdgj" condition "Ready" to 2026-06-27 05:44:58.740809021 +0000 UTC m=+14.169210051 I0627 05:44:58.770977 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:44:58.770954673 +0000 UTC m=+14.199355713 I0627 05:44:58.790910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:44:58.791362 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:44:58.791352213 +0000 UTC m=+14.219753283 I0627 05:44:58.809207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:44:58.811160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:45:03.663418 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:45:03.663405123 +0000 UTC m=+19.091806193 I0627 05:45:22.822242 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-27 05:45:22.822230381 +0000 UTC m=+38.250631421 I0627 05:45:22.822249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:45:22.822326 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-27 05:45:22.822316933 +0000 UTC m=+38.250718003 I0627 05:45:22.835114 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-27 05:45:22.835101612 +0000 UTC m=+38.263502662 I0627 05:45:22.847516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:45:22.847597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:45:22.847617 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-27 05:45:22.847611824 +0000 UTC m=+38.276012854 I0627 05:45:23.010213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rwht" condition "Approved" to 2026-06-27 05:45:23.010200449 +0000 UTC m=+38.438601489 I0627 05:45:23.037783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rwht" condition "Ready" to 2026-06-27 05:45:23.037771526 +0000 UTC m=+38.466172566 I0627 05:45:23.071842 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:45:23.071831739 +0000 UTC m=+38.500232779 I0627 05:45:23.093606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:45:23.093951 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:45:23.093942708 +0000 UTC m=+38.522343758 I0627 05:45:23.113470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:49:49.336719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:49:49.336710 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-06-27 05:49:49.336055908 +0000 UTC m=+304.764456988 I0627 05:49:49.336842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-06-27 05:49:49.33683147 +0000 UTC m=+304.765232490 I0627 05:49:49.352702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:49:49.352787 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-06-27 05:49:49.352779188 +0000 UTC m=+304.781180218 I0627 05:49:49.544895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:49:49.571337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-mnvtl" condition "Approved" to 2026-06-27 05:49:49.571326968 +0000 UTC m=+304.999727998 I0627 05:49:49.598876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-mnvtl" condition "Ready" to 2026-06-27 05:49:49.598861608 +0000 UTC m=+305.027262638 I0627 05:49:49.623528 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:49:49.623516235 +0000 UTC m=+305.051917285 I0627 05:49:49.643176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:49:49.696821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.584906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:50:57.585070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-27 05:50:57.585055868 +0000 UTC m=+373.013456968 I0627 05:50:57.584994 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-27 05:50:57.584974115 +0000 UTC m=+373.013375185 E0627 05:50:57.599315 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0627 05:50:57.599358 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-27 05:50:57.599349412 +0000 UTC m=+373.027750452 E0627 05:50:57.599432 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0627 05:50:57.601352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.601430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-27 05:50:57.601422671 +0000 UTC m=+373.029823711 E0627 05:50:57.613505 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0627 05:50:57.613591 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0627 05:50:57.613621 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0627 05:50:57.613648 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0627 05:50:57.616107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.616160 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-27 05:50:57.616153287 +0000 UTC m=+373.044554327 I0627 05:50:57.623274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.628041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2c25x" condition "Approved" to 2026-06-27 05:50:57.62802798 +0000 UTC m=+373.056429010 I0627 05:50:57.641582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2c25x" condition "Ready" to 2026-06-27 05:50:57.641568802 +0000 UTC m=+373.069969842 I0627 05:50:57.663704 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:50:57.66368786 +0000 UTC m=+373.092088930 I0627 05:50:57.679818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.680051 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:50:57.680044563 +0000 UTC m=+373.108445603 I0627 05:50:57.688682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:50:57.694976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:02.614748 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:02.614739075 +0000 UTC m=+378.043140105 I0627 05:51:40.973129 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-27 05:51:40.973082398 +0000 UTC m=+416.401483428 I0627 05:51:40.973545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:51:40.973564 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-27 05:51:40.973561283 +0000 UTC m=+416.401962313 I0627 05:51:40.978096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-27 05:51:40.978086713 +0000 UTC m=+416.406487743 I0627 05:51:40.978254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:51:40.978286 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-27 05:51:40.978279149 +0000 UTC m=+416.406680189 I0627 05:51:40.981115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:51:40.981157 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-27 05:51:40.981147212 +0000 UTC m=+416.409548272 I0627 05:51:40.981933 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-27 05:51:40.981921475 +0000 UTC m=+416.410322555 I0627 05:51:40.995398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:40.995463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:51:40.995482 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-27 05:51:40.995475868 +0000 UTC m=+416.423876908 I0627 05:51:41.001153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.001391 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-27 05:51:41.00138002 +0000 UTC m=+416.429781091 I0627 05:51:41.009426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.009488 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-27 05:51:41.009481665 +0000 UTC m=+416.437882695 I0627 05:51:41.089561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.123890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gzg76" condition "Approved" to 2026-06-27 05:51:41.123877077 +0000 UTC m=+416.552278137 I0627 05:51:41.144430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gzg76" condition "Ready" to 2026-06-27 05:51:41.144418674 +0000 UTC m=+416.572819714 I0627 05:51:41.172348 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:41.172335254 +0000 UTC m=+416.600736284 I0627 05:51:41.176126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.182731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-462wk" condition "Approved" to 2026-06-27 05:51:41.182717685 +0000 UTC m=+416.611118745 I0627 05:51:41.195171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.197790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-462wk" condition "Ready" to 2026-06-27 05:51:41.197783713 +0000 UTC m=+416.626184743 I0627 05:51:41.227353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.313882 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:41.313860083 +0000 UTC m=+416.742261123 I0627 05:51:41.561669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:41.562028 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:41.56202145 +0000 UTC m=+416.990422480 I0627 05:51:41.668862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q7hq2" condition "Approved" to 2026-06-27 05:51:41.668844931 +0000 UTC m=+417.097245971 I0627 05:51:42.179598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q7hq2" condition "Ready" to 2026-06-27 05:51:42.179588082 +0000 UTC m=+417.607989102 I0627 05:51:42.259714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:42.313364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:42.563586 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:42.563569311 +0000 UTC m=+417.991970391 I0627 05:51:42.661205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:42.661514 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:42.661507965 +0000 UTC m=+418.089909005 I0627 05:51:42.913299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:42.961523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:49.113252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:51:49.113290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" condition "Issuing" to 2026-06-27 05:51:49.113280786 +0000 UTC m=+424.541681816 I0627 05:51:49.113687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" condition "Ready" to 2026-06-27 05:51:49.113682618 +0000 UTC m=+424.542083648 I0627 05:51:49.129723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:49.129814 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" condition "Ready" to 2026-06-27 05:51:49.129803906 +0000 UTC m=+424.558204976 I0627 05:51:49.278246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:51:49.312991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kh5kp-s2l75" condition "Approved" to 2026-06-27 05:51:49.312971716 +0000 UTC m=+424.741372786 I0627 05:51:49.335897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kh5kp-s2l75" condition "Ready" to 2026-06-27 05:51:49.335886771 +0000 UTC m=+424.764287801 I0627 05:51:49.364222 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:51:49.364207953 +0000 UTC m=+424.792608983 I0627 05:51:49.384977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kh5kp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:52:11.976092 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-27 05:52:11.976069357 +0000 UTC m=+447.404470437 I0627 05:52:11.976197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:52:11.976239 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-27 05:52:11.976228432 +0000 UTC m=+447.404629502 I0627 05:52:11.994241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:52:11.994323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:52:11.994341 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-27 05:52:11.994335368 +0000 UTC m=+447.422736418 I0627 05:52:12.159517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f5v6m" condition "Approved" to 2026-06-27 05:52:12.159499854 +0000 UTC m=+447.587900884 I0627 05:52:12.193762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f5v6m" condition "Ready" to 2026-06-27 05:52:12.193740787 +0000 UTC m=+447.622141827 I0627 05:52:12.231126 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:52:12.231106562 +0000 UTC m=+447.659507602 I0627 05:52:12.257865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:52:12.259201 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:52:12.259182998 +0000 UTC m=+447.687584058 I0627 05:52:12.264781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:52:12.276648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:52:12.277108 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:52:12.277100648 +0000 UTC m=+447.705501688 I0627 05:55:25.068587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-27 05:55:25.068049742 +0000 UTC m=+640.496450812 I0627 05:55:25.068603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:55:25.068853 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-27 05:55:25.068839404 +0000 UTC m=+640.497240474 I0627 05:55:25.089464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:55:25.089591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-27 05:55:25.089579844 +0000 UTC m=+640.517980884 I0627 05:55:25.213718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:55:25.251065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mjv8s" condition "Approved" to 2026-06-27 05:55:25.251052195 +0000 UTC m=+640.679453235 I0627 05:55:25.268863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mjv8s" condition "Ready" to 2026-06-27 05:55:25.26884883 +0000 UTC m=+640.697249870 I0627 05:55:25.297819 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:55:25.297805738 +0000 UTC m=+640.726206768 I0627 05:55:25.318607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:57:48.209922 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-27 05:57:48.209905117 +0000 UTC m=+783.638306148 I0627 05:57:48.210213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:57:48.210306 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-27 05:57:48.21029558 +0000 UTC m=+783.638696650 I0627 05:57:48.227301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:57:48.227434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:57:48.227519 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-27 05:57:48.227451334 +0000 UTC m=+783.655852364 I0627 05:57:48.347552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:57:48.354483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kl927" condition "Approved" to 2026-06-27 05:57:48.354472531 +0000 UTC m=+783.782873571 I0627 05:57:48.370534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kl927" condition "Ready" to 2026-06-27 05:57:48.370523224 +0000 UTC m=+783.798924264 I0627 05:57:48.398042 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:57:48.398027188 +0000 UTC m=+783.826428238 I0627 05:57:48.413860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:57:48.414177 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:57:48.414172783 +0000 UTC m=+783.842573803 I0627 05:57:48.424326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:57:48.438416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:58:44.764374 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-27 05:58:44.764359271 +0000 UTC m=+840.192760311 I0627 05:58:44.764679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:58:44.764831 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-27 05:58:44.764822416 +0000 UTC m=+840.193223496 I0627 05:58:44.779825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:58:44.780002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 05:58:44.780043 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-27 05:58:44.780021584 +0000 UTC m=+840.208422624 I0627 05:58:44.919588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:58:44.926206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4hdxg" condition "Approved" to 2026-06-27 05:58:44.926197843 +0000 UTC m=+840.354598873 I0627 05:58:44.944568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4hdxg" condition "Ready" to 2026-06-27 05:58:44.944559243 +0000 UTC m=+840.372960283 I0627 05:58:44.987115 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:58:44.987099931 +0000 UTC m=+840.415500971 I0627 05:58:45.009664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 05:58:45.010073 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 05:58:45.010065243 +0000 UTC m=+840.438466283 I0627 05:58:45.028937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:01:37.328352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:01:37.328408 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-27 06:01:37.328402837 +0000 UTC m=+1012.756803867 I0627 06:01:37.328363 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-27 06:01:37.328339135 +0000 UTC m=+1012.756740195 I0627 06:01:37.344000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:01:37.344068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:01:37.344086 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-27 06:01:37.3440801 +0000 UTC m=+1012.772481150 I0627 06:01:37.750029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-42m8c" condition "Approved" to 2026-06-27 06:01:37.750018018 +0000 UTC m=+1013.178419058 I0627 06:01:37.766126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-42m8c" condition "Ready" to 2026-06-27 06:01:37.766111494 +0000 UTC m=+1013.194512564 I0627 06:01:37.799431 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:01:37.799418317 +0000 UTC m=+1013.227819357 I0627 06:01:37.822503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:07:49.720936 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-27 06:07:49.720883833 +0000 UTC m=+1385.149284903 I0627 06:07:49.721041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:07:49.721133 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-27 06:07:49.721120079 +0000 UTC m=+1385.149521139 I0627 06:07:49.737969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:07:49.738037 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-27 06:07:49.738029638 +0000 UTC m=+1385.166430668 I0627 06:07:49.988460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:07:50.027123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-fn548" condition "Approved" to 2026-06-27 06:07:50.027113504 +0000 UTC m=+1385.455514534 I0627 06:07:50.046378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-fn548" condition "Ready" to 2026-06-27 06:07:50.04636876 +0000 UTC m=+1385.474769800 I0627 06:07:50.083421 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:07:50.083408952 +0000 UTC m=+1385.511809982 I0627 06:07:50.109132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:07:50.131668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:07:50.193436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:14.621321 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-27 06:09:14.621267219 +0000 UTC m=+1470.049668269 I0627 06:09:14.621333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:09:14.621466 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-27 06:09:14.621441964 +0000 UTC m=+1470.049843024 I0627 06:09:14.638363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:14.638426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:09:14.638439 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-27 06:09:14.638434876 +0000 UTC m=+1470.066835906 I0627 06:09:14.991628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:15.000042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-f8cbz" condition "Approved" to 2026-06-27 06:09:15.000032766 +0000 UTC m=+1470.428433806 I0627 06:09:15.024644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-f8cbz" condition "Ready" to 2026-06-27 06:09:15.024633848 +0000 UTC m=+1470.453034878 I0627 06:09:15.057055 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:09:15.057041094 +0000 UTC m=+1470.485442144 I0627 06:09:15.075747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:15.076107 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:09:15.076099315 +0000 UTC m=+1470.504500345 I0627 06:09:15.095400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:15.095625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:09:15.095942 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:09:15.095934508 +0000 UTC m=+1470.524335538 I0627 06:09:15.098643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.325469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:10:07.325518 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-27 06:10:07.325508362 +0000 UTC m=+1522.753909422 I0627 06:10:07.326010 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-27 06:10:07.326001136 +0000 UTC m=+1522.754402206 I0627 06:10:07.347032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.347194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:10:07.347225 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-27 06:10:07.347215599 +0000 UTC m=+1522.775616679 I0627 06:10:07.392578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.398142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-6fpgx" condition "Approved" to 2026-06-27 06:10:07.39812118 +0000 UTC m=+1522.826522240 I0627 06:10:07.415663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-6fpgx" condition "Ready" to 2026-06-27 06:10:07.415652817 +0000 UTC m=+1522.844053847 I0627 06:10:07.441908 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:10:07.441894246 +0000 UTC m=+1522.870295286 I0627 06:10:07.461405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.461766 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:10:07.46175636 +0000 UTC m=+1522.890157400 I0627 06:10:07.471578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.483955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.976881 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-27 06:10:07.976864729 +0000 UTC m=+1523.405265769 I0627 06:10:07.976899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:10:07.976958 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-27 06:10:07.976947331 +0000 UTC m=+1523.405348371 I0627 06:10:07.994304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:07.994516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:10:07.994623 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-27 06:10:07.994612321 +0000 UTC m=+1523.423013361 I0627 06:10:08.029395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:08.036056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-s6nvb" condition "Approved" to 2026-06-27 06:10:08.036042559 +0000 UTC m=+1523.464443589 I0627 06:10:08.059521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-s6nvb" condition "Ready" to 2026-06-27 06:10:08.059509476 +0000 UTC m=+1523.487910516 I0627 06:10:08.086832 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:10:08.086812636 +0000 UTC m=+1523.515213676 I0627 06:10:08.104857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:08.658526 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-27 06:10:08.65851136 +0000 UTC m=+1524.086912400 I0627 06:10:09.278793 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-27 06:10:09.278779447 +0000 UTC m=+1524.707180507 I0627 06:10:54.678283 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-27 06:10:54.678252806 +0000 UTC m=+1570.106653856 I0627 06:10:54.678823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:10:54.678851 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-27 06:10:54.678846763 +0000 UTC m=+1570.107247803 I0627 06:10:54.715761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:54.715870 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-27 06:10:54.715861912 +0000 UTC m=+1570.144262952 I0627 06:10:56.127045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:10:56.173913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-n56jq" condition "Approved" to 2026-06-27 06:10:56.173888822 +0000 UTC m=+1571.602289852 I0627 06:10:56.201528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-n56jq" condition "Ready" to 2026-06-27 06:10:56.201514891 +0000 UTC m=+1571.629915931 I0627 06:10:56.243422 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:10:56.243406951 +0000 UTC m=+1571.671807981 I0627 06:10:56.268099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:24.149482 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-27 06:13:24.149446383 +0000 UTC m=+1719.577847423 I0627 06:13:24.149620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:13:24.149683 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-27 06:13:24.14967616 +0000 UTC m=+1719.578077220 I0627 06:13:24.170995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:24.171058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:13:24.171072 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-27 06:13:24.171066488 +0000 UTC m=+1719.599467528 I0627 06:13:24.575925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fznmj" condition "Approved" to 2026-06-27 06:13:24.57590585 +0000 UTC m=+1720.004306920 I0627 06:13:24.596840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fznmj" condition "Ready" to 2026-06-27 06:13:24.596829424 +0000 UTC m=+1720.025230464 I0627 06:13:24.624806 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:13:24.624797913 +0000 UTC m=+1720.053198943 I0627 06:13:24.651106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:24.706631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:25.679353 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-27 06:13:25.679337419 +0000 UTC m=+1721.107738459 I0627 06:13:25.679356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:13:25.679606 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-27 06:13:25.679596256 +0000 UTC m=+1721.107997286 I0627 06:13:25.696631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:25.696701 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-27 06:13:25.696693631 +0000 UTC m=+1721.125094671 I0627 06:13:25.808971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:25.840924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sz7sq" condition "Approved" to 2026-06-27 06:13:25.840912552 +0000 UTC m=+1721.269313592 I0627 06:13:25.859574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sz7sq" condition "Ready" to 2026-06-27 06:13:25.859564262 +0000 UTC m=+1721.287965302 I0627 06:13:25.889509 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:13:25.889496628 +0000 UTC m=+1721.317897668 I0627 06:13:25.915061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:25.915382 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:13:25.915374116 +0000 UTC m=+1721.343775156 I0627 06:13:25.926971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:13:25.937229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:16:23.771102 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-27 06:16:23.771062687 +0000 UTC m=+1899.199463717 I0627 06:16:23.771104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:16:23.771327 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-27 06:16:23.771304924 +0000 UTC m=+1899.199706014 I0627 06:16:23.794901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:16:23.795001 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-27 06:16:23.79499411 +0000 UTC m=+1899.223395140 I0627 06:16:23.884025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:16:23.921694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-v4b67" condition "Approved" to 2026-06-27 06:16:23.921682888 +0000 UTC m=+1899.350083928 I0627 06:16:23.942623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-v4b67" condition "Ready" to 2026-06-27 06:16:23.942614915 +0000 UTC m=+1899.371015945 I0627 06:16:23.971647 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:16:23.971634885 +0000 UTC m=+1899.400035935 I0627 06:16:23.994981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:16:23.995283 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:16:23.995274839 +0000 UTC m=+1899.423675869 I0627 06:16:24.018529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:16:24.018891 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:16:24.018881953 +0000 UTC m=+1899.447282983 I0627 06:17:11.768249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:17:11.769962 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-api" condition "Ready" to 2026-06-27 06:17:11.769945701 +0000 UTC m=+1947.198346731 I0627 06:17:11.770228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:17:11.770262 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-vnc" condition "Issuing" to 2026-06-27 06:17:11.7702544 +0000 UTC m=+1947.198655470 I0627 06:17:11.770268 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-vnc" condition "Ready" to 2026-06-27 06:17:11.77024655 +0000 UTC m=+1947.198647620 I0627 06:17:11.768354 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-api" condition "Issuing" to 2026-06-27 06:17:11.768330355 +0000 UTC m=+1947.196731415 I0627 06:17:11.788413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:11.788467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:17:11.788479 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-vnc" condition "Issuing" to 2026-06-27 06:17:11.788473758 +0000 UTC m=+1947.216874788 I0627 06:17:11.792326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:11.792451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z8zsb-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:17:11.792483 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z8zsb-api" condition "Issuing" to 2026-06-27 06:17:11.792474083 +0000 UTC m=+1947.220875123 I0627 06:17:12.076643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-z8zsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:12.084669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z8zsb-vnc-hjsn4" condition "Approved" to 2026-06-27 06:17:12.084659075 +0000 UTC m=+1947.513060125 I0627 06:17:12.106962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z8zsb-vnc-hjsn4" condition "Ready" to 2026-06-27 06:17:12.10695161 +0000 UTC m=+1947.535352650 I0627 06:17:12.138388 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z8zsb-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:17:12.138377659 +0000 UTC m=+1947.566778679 I0627 06:17:12.157060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-z8zsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:12.157428 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z8zsb-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:17:12.157419711 +0000 UTC m=+1947.585820761 I0627 06:17:12.178132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-z8zsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:12.224898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z8zsb-api-wgpfs" condition "Approved" to 2026-06-27 06:17:12.224884104 +0000 UTC m=+1947.653285144 I0627 06:17:12.239653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z8zsb-api-wgpfs" condition "Ready" to 2026-06-27 06:17:12.239642172 +0000 UTC m=+1947.668043212 I0627 06:17:12.268491 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z8zsb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:17:12.268478216 +0000 UTC m=+1947.696879246 I0627 06:17:12.300866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-z8zsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z8zsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:17:12.301519 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z8zsb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:17:12.301504753 +0000 UTC m=+1947.729905813 I0627 06:19:16.535107 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-27 06:19:16.535091766 +0000 UTC m=+2071.963492806 I0627 06:19:16.535218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:19:16.535376 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-27 06:19:16.535260331 +0000 UTC m=+2071.963661401 I0627 06:19:16.554668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:19:16.554798 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-27 06:19:16.554788466 +0000 UTC m=+2071.983189526 I0627 06:19:16.754364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:19:16.795295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-w8zl5" condition "Approved" to 2026-06-27 06:19:16.79528575 +0000 UTC m=+2072.223686790 I0627 06:19:16.817171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-w8zl5" condition "Ready" to 2026-06-27 06:19:16.817157324 +0000 UTC m=+2072.245558364 I0627 06:19:16.841799 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:19:16.841784407 +0000 UTC m=+2072.270185477 I0627 06:19:16.861358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:19:16.861726 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:19:16.861715724 +0000 UTC m=+2072.290116764 I0627 06:19:16.888428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:50.433033 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-27 06:22:50.432987609 +0000 UTC m=+2285.861388669 I0627 06:22:50.433068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:22:50.433120 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-27 06:22:50.433115083 +0000 UTC m=+2285.861516123 I0627 06:22:50.453385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:50.453471 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-27 06:22:50.453462577 +0000 UTC m=+2285.881863617 I0627 06:22:50.570797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:50.607743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-h8szz" condition "Approved" to 2026-06-27 06:22:50.607732609 +0000 UTC m=+2286.036133639 I0627 06:22:50.631356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-h8szz" condition "Ready" to 2026-06-27 06:22:50.631344798 +0000 UTC m=+2286.059745838 I0627 06:22:50.663391 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:22:50.663376723 +0000 UTC m=+2286.091777773 I0627 06:22:50.682500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:52.051216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:22:52.051250 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-27 06:22:52.051242815 +0000 UTC m=+2287.479643855 I0627 06:22:52.051723 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-27 06:22:52.051709748 +0000 UTC m=+2287.480110788 I0627 06:22:52.067733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:52.067836 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-27 06:22:52.067827319 +0000 UTC m=+2287.496228359 I0627 06:22:52.429247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:52.463000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-bnhpf" condition "Approved" to 2026-06-27 06:22:52.462988571 +0000 UTC m=+2287.891389601 I0627 06:22:52.482752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-bnhpf" condition "Ready" to 2026-06-27 06:22:52.482739157 +0000 UTC m=+2287.911140217 I0627 06:22:52.522099 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:22:52.522085486 +0000 UTC m=+2287.950486516 I0627 06:22:52.544692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:22:52.545168 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:22:52.545158089 +0000 UTC m=+2287.973559139 I0627 06:22:52.565676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:52.910810 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-27 06:24:52.910778613 +0000 UTC m=+2408.339179643 I0627 06:24:52.911003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:24:52.911093 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-27 06:24:52.911083022 +0000 UTC m=+2408.339484082 E0627 06:24:52.924310 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:52.924349 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-27 06:24:52.924342539 +0000 UTC m=+2408.352743579 I0627 06:24:52.924523 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:52.927594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:52.927660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:24:52.927680 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-27 06:24:52.927674846 +0000 UTC m=+2408.356075886 E0627 06:24:52.936093 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0627 06:24:52.936544 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:52.936589 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0627 06:24:52.936658 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0627 06:24:52.967034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:52.968625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lvp54" condition "Approved" to 2026-06-27 06:24:52.9686023 +0000 UTC m=+2408.397003330 I0627 06:24:52.985533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lvp54" condition "Ready" to 2026-06-27 06:24:52.985517683 +0000 UTC m=+2408.413918753 I0627 06:24:53.016658 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:53.016647282 +0000 UTC m=+2408.445048322 I0627 06:24:53.037216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.614442 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-27 06:24:53.614423638 +0000 UTC m=+2409.042824698 I0627 06:24:53.614563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:24:53.614602 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-27 06:24:53.614594022 +0000 UTC m=+2409.042995082 E0627 06:24:53.628618 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:53.628676 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-27 06:24:53.628668663 +0000 UTC m=+2409.057069703 I0627 06:24:53.628695 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:53.635771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.635955 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-27 06:24:53.635945996 +0000 UTC m=+2409.064347056 E0627 06:24:53.649513 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0627 06:24:53.649605 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0627 06:24:53.649646 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0627 06:24:53.649681 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0627 06:24:53.657644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.688872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-cfxd6" condition "Approved" to 2026-06-27 06:24:53.688856259 +0000 UTC m=+2409.117257309 I0627 06:24:53.705594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-cfxd6" condition "Ready" to 2026-06-27 06:24:53.705583797 +0000 UTC m=+2409.133984837 I0627 06:24:53.730489 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:53.730471713 +0000 UTC m=+2409.158872783 I0627 06:24:53.753101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.753427 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:53.753416503 +0000 UTC m=+2409.181817553 I0627 06:24:53.754305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.769684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:53.770157 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:53.770148251 +0000 UTC m=+2409.198549291 I0627 06:24:54.382834 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-27 06:24:54.382819601 +0000 UTC m=+2409.811220661 I0627 06:24:54.383045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:24:54.383104 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-27 06:24:54.383089789 +0000 UTC m=+2409.811490859 I0627 06:24:54.398399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:54.398508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:24:54.398530 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-27 06:24:54.39852423 +0000 UTC m=+2409.826925270 I0627 06:24:54.442020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-p6l7x" condition "Approved" to 2026-06-27 06:24:54.442000568 +0000 UTC m=+2409.870401678 I0627 06:24:54.459278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-p6l7x" condition "Ready" to 2026-06-27 06:24:54.459265402 +0000 UTC m=+2409.887666442 I0627 06:24:57.937088 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:57.937068976 +0000 UTC m=+2413.365470036 I0627 06:24:57.952403 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-p6l7x" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:57.952392202 +0000 UTC m=+2413.380793242 I0627 06:24:57.981087 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:57.98106943 +0000 UTC m=+2413.409470470 I0627 06:24:58.002112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:24:58.650746 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:24:58.650732613 +0000 UTC m=+2414.079133653 I0627 06:27:06.105185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:06.105217 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-27 06:27:06.105210752 +0000 UTC m=+2541.533611782 I0627 06:27:06.105476 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-27 06:27:06.105470789 +0000 UTC m=+2541.533871819 I0627 06:27:06.129209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:06.129448 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-27 06:27:06.129435412 +0000 UTC m=+2541.557836472 I0627 06:27:06.359519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:06.383584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5fcwr" condition "Approved" to 2026-06-27 06:27:06.383552486 +0000 UTC m=+2541.811953526 I0627 06:27:06.404729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5fcwr" condition "Ready" to 2026-06-27 06:27:06.404707237 +0000 UTC m=+2541.833108277 I0627 06:27:06.435749 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:06.435732506 +0000 UTC m=+2541.864133576 I0627 06:27:06.465930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:53.329664 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-27 06:27:53.329644509 +0000 UTC m=+2588.758045579 I0627 06:27:53.349669 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-27 06:27:53.349650637 +0000 UTC m=+2588.778051707 I0627 06:27:53.349697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:53.349758 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-27 06:27:53.34974799 +0000 UTC m=+2588.778149050 I0627 06:27:53.365178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:53.365246 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-27 06:27:53.365239799 +0000 UTC m=+2588.793640829 E0627 06:27:53.386842 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0627 06:27:53.448262 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-27 06:27:53.44824671 +0000 UTC m=+2588.876647750 I0627 06:27:53.470697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:53.470799 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-27 06:27:53.470786182 +0000 UTC m=+2588.899187242 I0627 06:27:53.470967 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-27 06:27:53.470944227 +0000 UTC m=+2588.899345327 E0627 06:27:53.489039 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0627 06:27:53.490118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:53.490197 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-27 06:27:53.490188354 +0000 UTC m=+2588.918589384 I0627 06:27:53.719565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:53.757358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-4724x" condition "Approved" to 2026-06-27 06:27:53.757342335 +0000 UTC m=+2589.185743375 I0627 06:27:53.786413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-4724x" condition "Ready" to 2026-06-27 06:27:53.786399876 +0000 UTC m=+2589.214800916 I0627 06:27:53.832325 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:53.832275433 +0000 UTC m=+2589.260676513 I0627 06:27:53.861925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:53.862311 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:53.862304302 +0000 UTC m=+2589.290705342 I0627 06:27:53.887779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:54.314312 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-27 06:27:54.314296342 +0000 UTC m=+2589.742697382 I0627 06:27:54.332821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:54.332864 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-27 06:27:54.332856589 +0000 UTC m=+2589.761257629 I0627 06:27:54.332873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-27 06:27:54.332857179 +0000 UTC m=+2589.761258219 I0627 06:27:54.349391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:54.349464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:54.349481 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-27 06:27:54.34947434 +0000 UTC m=+2589.777875380 I0627 06:27:54.802004 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-27 06:27:54.801986044 +0000 UTC m=+2590.230387084 I0627 06:27:54.805372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-g6kzx" condition "Approved" to 2026-06-27 06:27:54.805363072 +0000 UTC m=+2590.233764102 I0627 06:27:54.824467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:54.824498 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-27 06:27:54.824493566 +0000 UTC m=+2590.252894596 I0627 06:27:54.824489 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-27 06:27:54.824475595 +0000 UTC m=+2590.252876635 I0627 06:27:54.828149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-g6kzx" condition "Ready" to 2026-06-27 06:27:54.828130231 +0000 UTC m=+2590.256531271 I0627 06:27:54.843676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:54.843764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:54.843794 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-27 06:27:54.843786534 +0000 UTC m=+2590.272187584 I0627 06:27:54.864056 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:54.86404336 +0000 UTC m=+2590.292444400 I0627 06:27:54.895439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:55.315373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-stc9z" condition "Approved" to 2026-06-27 06:27:55.31535261 +0000 UTC m=+2590.743753650 I0627 06:27:55.330078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-stc9z" condition "Ready" to 2026-06-27 06:27:55.330067855 +0000 UTC m=+2590.758468885 I0627 06:27:55.350651 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-27 06:27:55.35063737 +0000 UTC m=+2590.779038420 I0627 06:27:55.363058 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:55.3630423 +0000 UTC m=+2590.791443340 I0627 06:27:55.374590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:27:55.374628 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-27 06:27:55.374620684 +0000 UTC m=+2590.803021714 I0627 06:27:55.374890 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-27 06:27:55.374885962 +0000 UTC m=+2590.803286992 I0627 06:27:55.388037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:55.391011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:55.391167 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-27 06:27:55.391155233 +0000 UTC m=+2590.819556313 I0627 06:27:55.591016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:55.643593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:55.819352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rvbff" condition "Approved" to 2026-06-27 06:27:55.819339764 +0000 UTC m=+2591.247740794 I0627 06:27:55.899655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rvbff" condition "Ready" to 2026-06-27 06:27:55.899646217 +0000 UTC m=+2591.328047247 I0627 06:27:56.342325 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:56.342304746 +0000 UTC m=+2591.770705806 I0627 06:27:56.490518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:56.491039 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:27:56.491027311 +0000 UTC m=+2591.919428381 I0627 06:27:56.742013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:27:56.791977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:11.565703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:31:11.565742 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-27 06:31:11.565735647 +0000 UTC m=+2786.994136697 I0627 06:31:11.565701 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-27 06:31:11.565659705 +0000 UTC m=+2786.994060735 I0627 06:31:11.583221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:11.583337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:31:11.583366 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-27 06:31:11.583358209 +0000 UTC m=+2787.011759259 I0627 06:31:11.763115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4ctpz" condition "Approved" to 2026-06-27 06:31:11.763096545 +0000 UTC m=+2787.191497565 I0627 06:31:11.782137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4ctpz" condition "Ready" to 2026-06-27 06:31:11.782121667 +0000 UTC m=+2787.210522707 I0627 06:31:11.819376 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:31:11.819354857 +0000 UTC m=+2787.247755927 I0627 06:31:11.845396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:11.845746 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:31:11.845738513 +0000 UTC m=+2787.274139553 I0627 06:31:11.862221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:11.864296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:14.149942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:31:14.149978 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-27 06:31:14.14997009 +0000 UTC m=+2789.578371130 I0627 06:31:14.150246 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-27 06:31:14.150240558 +0000 UTC m=+2789.578641598 I0627 06:31:14.171466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:14.171565 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-27 06:31:14.171557157 +0000 UTC m=+2789.599958197 I0627 06:31:14.333326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:14.378375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-bvfdz" condition "Approved" to 2026-06-27 06:31:14.378360697 +0000 UTC m=+2789.806761737 I0627 06:31:14.394498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-bvfdz" condition "Ready" to 2026-06-27 06:31:14.394487026 +0000 UTC m=+2789.822888076 I0627 06:31:14.428931 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:31:14.428917086 +0000 UTC m=+2789.857318126 I0627 06:31:14.451539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:14.451896 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:31:14.451888612 +0000 UTC m=+2789.880289652 I0627 06:31:14.470045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:31:14.480377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:35:33.408388 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:35:33.408460 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-27 06:35:33.408449201 +0000 UTC m=+3048.836850271 I0627 06:35:33.408916 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-27 06:35:33.408901764 +0000 UTC m=+3048.837302794 I0627 06:35:33.437054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:35:33.437158 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-27 06:35:33.437150204 +0000 UTC m=+3048.865551254 I0627 06:35:33.626263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:35:33.660448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-2n6h7" condition "Approved" to 2026-06-27 06:35:33.660434993 +0000 UTC m=+3049.088836033 I0627 06:35:33.678939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-2n6h7" condition "Ready" to 2026-06-27 06:35:33.67892886 +0000 UTC m=+3049.107329900 I0627 06:35:33.715214 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:35:33.715201813 +0000 UTC m=+3049.143602853 I0627 06:35:33.736116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:36:07.107698 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-27 06:36:07.107687741 +0000 UTC m=+3082.536088771 I0627 06:36:07.107677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0627 06:36:07.107925 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-27 06:36:07.107918797 +0000 UTC m=+3082.536319837 I0627 06:36:07.124235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:36:07.124350 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-27 06:36:07.124341444 +0000 UTC m=+3082.552742474 I0627 06:36:07.283954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:36:07.323348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ntqjt" condition "Approved" to 2026-06-27 06:36:07.323325819 +0000 UTC m=+3082.751726899 I0627 06:36:07.348197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ntqjt" condition "Ready" to 2026-06-27 06:36:07.34818544 +0000 UTC m=+3082.776586480 I0627 06:36:07.379805 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-27 06:36:07.379787107 +0000 UTC m=+3082.808188147 I0627 06:36:07.406012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0627 06:36:07.463695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"