I0420 10:49:22.050667 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:49:22.050856 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:49:22.051143 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:49:22.055322 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:49:22.055842 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:49:22.055954 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:49:22.055957 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:49:22.058264 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:49:22.074963 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:49:22.078668 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:49:22.078696 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:49:22.079072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:49:22.086117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:49:22.090418 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:49:22.090528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:49:22.093725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:49:22.096288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:49:22.099538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:49:22.101467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:49:22.101495 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:49:22.101506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:49:22.101661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:49:22.104662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:49:22.108255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:49:22.111498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:49:22.114313 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:49:22.117252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:49:22.120068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:49:22.121972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:49:22.124030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:49:22.125974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:49:22.127970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:49:22.138725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:49:22.142040 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.142345 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.142365 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.142418 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.142801 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.143010 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.142973 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.143692 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.144291 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:22.269145 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:49:56.134037 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:49:56.134001996 +0000 UTC m=+34.116605817 I0420 10:49:56.970835 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:49:56.970818875 +0000 UTC m=+34.953422666 I0420 10:49:56.971006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:49:56.971078 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:49:56.971067281 +0000 UTC m=+34.953671082 I0420 10:49:56.983261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:49:56.983392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:49:56.983413 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:49:56.98340852 +0000 UTC m=+34.966012321 E0420 10:49:56.991332 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:49:56.991393 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:49:56.991385382 +0000 UTC m=+34.973989183 E0420 10:49:56.991416 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:49:57.056892 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:49:57.057307 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:49:57.057331 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:49:57.057362 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:49:57.079726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:49:57.085347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mj4c4" condition "Approved" to 2026-04-20 10:49:57.085339324 +0000 UTC m=+35.067943115 I0420 10:49:57.103918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mj4c4" condition "Ready" to 2026-04-20 10:49:57.103898135 +0000 UTC m=+35.086501956 I0420 10:49:57.137673 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:49:57.137662781 +0000 UTC m=+35.120266582 I0420 10:49:57.162300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:02.059597 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:02.059584446 +0000 UTC m=+40.042188257 I0420 10:50:02.163267 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:50:02.163239228 +0000 UTC m=+40.145843059 I0420 10:50:02.163334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:02.163393 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:50:02.163381341 +0000 UTC m=+40.145985142 I0420 10:50:02.179573 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:50:02.179558878 +0000 UTC m=+40.162162679 I0420 10:50:02.193863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:02.193938 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:50:02.193931454 +0000 UTC m=+40.176535255 I0420 10:50:02.300649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:02.618849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gjj42" condition "Approved" to 2026-04-20 10:50:02.618829686 +0000 UTC m=+40.601433487 I0420 10:50:02.653454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gjj42" condition "Ready" to 2026-04-20 10:50:02.653439751 +0000 UTC m=+40.636043552 E0420 10:50:02.653527 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-5vfrv not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-5vfrv\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-gjj42" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0420 10:50:02.672211 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-5vfrv not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-5vfrv\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-gjj42" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0420 10:50:02.936172 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" resource_name="rabbitmq-messaging-topology-operator-webhook" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-gjj42" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-5vfrv" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0420 10:50:02.963361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gck44" condition "Approved" to 2026-04-20 10:50:02.963341333 +0000 UTC m=+40.945945134 I0420 10:50:02.986235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gck44" condition "Ready" to 2026-04-20 10:50:02.986221902 +0000 UTC m=+40.968825713 I0420 10:50:03.020091 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:03.020073171 +0000 UTC m=+41.002676992 I0420 10:50:03.045432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:03.045715 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:03.045707482 +0000 UTC m=+41.028311283 I0420 10:50:03.074545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:03.075862 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:03.075848016 +0000 UTC m=+41.058451847 I0420 10:50:07.841183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:07.841271 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:50:07.8412571 +0000 UTC m=+45.823860921 I0420 10:50:07.841286 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:50:07.84126431 +0000 UTC m=+45.823868111 E0420 10:50:07.855192 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:50:07.855248 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 10:50:07.855238047 +0000 UTC m=+45.837841848 I0420 10:50:07.855292 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:50:07.858953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:07.859057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:07.859080 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:50:07.859075274 +0000 UTC m=+45.841679075 E0420 10:50:07.866404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 10:50:07.866768 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:50:07.866838 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 10:50:07.866904 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:50:07.867091 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:50:07.867083636 +0000 UTC m=+45.849687437 I0420 10:50:07.867251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:07.867311 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:50:07.867299211 +0000 UTC m=+45.849903012 I0420 10:50:07.882347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:07.882479 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:50:07.882467945 +0000 UTC m=+45.865071746 I0420 10:50:08.039177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:08.046867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sdkxq" condition "Approved" to 2026-04-20 10:50:08.046839844 +0000 UTC m=+46.029443665 I0420 10:50:08.078898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sdkxq" condition "Ready" to 2026-04-20 10:50:08.078885522 +0000 UTC m=+46.061489303 I0420 10:50:08.109979 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:08.109959637 +0000 UTC m=+46.092563458 I0420 10:50:08.129968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:08.185360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:08.216568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8w8mz" condition "Approved" to 2026-04-20 10:50:08.216543926 +0000 UTC m=+46.199147727 I0420 10:50:08.236733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8w8mz" condition "Ready" to 2026-04-20 10:50:08.236705303 +0000 UTC m=+46.219309134 I0420 10:50:08.510629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:08.510726 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-20 10:50:08.51066631 +0000 UTC m=+46.493270131 I0420 10:50:08.510809 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-20 10:50:08.510779172 +0000 UTC m=+46.493382993 I0420 10:50:08.529926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:08.530082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:08.530137 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-20 10:50:08.530124791 +0000 UTC m=+46.512728612 I0420 10:50:08.572271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:08.574901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-zg6n2" condition "Approved" to 2026-04-20 10:50:08.574882367 +0000 UTC m=+46.557486158 I0420 10:50:08.591600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-zg6n2" condition "Ready" to 2026-04-20 10:50:08.591585366 +0000 UTC m=+46.574189167 I0420 10:50:08.900807 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:08.900788352 +0000 UTC m=+46.883392153 I0420 10:50:09.022676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:09.022968 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:09.022957035 +0000 UTC m=+47.005560826 I0420 10:50:09.305088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:09.777569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:09.777626 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-20 10:50:09.777613698 +0000 UTC m=+47.760217529 I0420 10:50:09.777683 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-20 10:50:09.777656749 +0000 UTC m=+47.760260580 I0420 10:50:09.971511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:09.971604 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-20 10:50:09.971594151 +0000 UTC m=+47.954197952 I0420 10:50:10.485041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:10.533227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-znmr2" condition "Approved" to 2026-04-20 10:50:10.533209924 +0000 UTC m=+48.515813725 I0420 10:50:10.550751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-znmr2" condition "Ready" to 2026-04-20 10:50:10.550733972 +0000 UTC m=+48.533337773 I0420 10:50:10.577565 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-20 10:50:10.577466848 +0000 UTC m=+48.560070679 I0420 10:50:10.578851 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:10.578827219 +0000 UTC m=+48.561431050 I0420 10:50:10.599696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:10.601054 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:10.601043013 +0000 UTC m=+48.583646804 I0420 10:50:10.700316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:11.417684 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-20 10:50:11.417667504 +0000 UTC m=+49.400271325 I0420 10:50:12.867212 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:12.867198875 +0000 UTC m=+50.849802706 I0420 10:50:12.883555 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-8w8mz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:12.883537986 +0000 UTC m=+50.866141787 I0420 10:50:12.917139 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:12.915277846 +0000 UTC m=+50.897881647 I0420 10:50:12.942122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:12.942985 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:12.942973224 +0000 UTC m=+50.925577055 I0420 10:50:12.961573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:12.962044 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:12.962032857 +0000 UTC m=+50.944636688 I0420 10:50:12.963774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:38.488979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-20 10:54:38.488906813 +0000 UTC m=+316.471510634 I0420 10:54:38.489260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:54:38.489371 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-04-20 10:54:38.489355484 +0000 UTC m=+316.471959315 I0420 10:54:38.507115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:38.507188 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-20 10:54:38.507179678 +0000 UTC m=+316.489783479 I0420 10:54:38.589754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:38.622719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-kn55x" condition "Approved" to 2026-04-20 10:54:38.622703868 +0000 UTC m=+316.605307669 I0420 10:54:38.642249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-kn55x" condition "Ready" to 2026-04-20 10:54:38.642229722 +0000 UTC m=+316.624833543 I0420 10:54:38.673169 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:54:38.673153982 +0000 UTC m=+316.655757783 I0420 10:54:38.697670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.604944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:55:52.605064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:55:52.605014971 +0000 UTC m=+390.587618802 I0420 10:55:52.605153 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:55:52.60498469 +0000 UTC m=+390.587588511 E0420 10:55:52.618482 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:55:52.618535 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:55:52.618524913 +0000 UTC m=+390.601128714 E0420 10:55:52.618628 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:55:52.618734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.618826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:55:52.618856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:55:52.618847252 +0000 UTC m=+390.601451073 E0420 10:55:52.629125 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:55:52.629304 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:55:52.629378 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:55:52.629473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:55:52.656236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.661090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zdpjf" condition "Approved" to 2026-04-20 10:55:52.661066392 +0000 UTC m=+390.643670223 I0420 10:55:52.675992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zdpjf" condition "Ready" to 2026-04-20 10:55:52.675981339 +0000 UTC m=+390.658585130 I0420 10:55:52.699061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:55:52.69904981 +0000 UTC m=+390.681653611 I0420 10:55:52.720577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.720923 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:55:52.720911724 +0000 UTC m=+390.703515525 I0420 10:55:52.730892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.742182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:52.742587 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:55:52.742575982 +0000 UTC m=+390.725179783 I0420 10:55:52.743183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:57.629763 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:55:57.629722513 +0000 UTC m=+395.612326494 I0420 10:56:41.422085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:56:41.42206155 +0000 UTC m=+439.404665341 I0420 10:56:41.422509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:56:41.422542 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:56:41.422538041 +0000 UTC m=+439.405141832 I0420 10:56:41.449827 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:56:41.449800444 +0000 UTC m=+439.432404265 I0420 10:56:41.449850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:56:41.450455 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:56:41.450445629 +0000 UTC m=+439.433049450 I0420 10:56:41.464887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.465837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:56:41.466875 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:56:41.466868572 +0000 UTC m=+439.449472373 I0420 10:56:41.484424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:56:41.484472 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:56:41.484461293 +0000 UTC m=+439.467065094 I0420 10:56:41.487445 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:56:41.487422544 +0000 UTC m=+439.470026345 I0420 10:56:41.525890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.525987 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:56:41.525975646 +0000 UTC m=+439.508579467 I0420 10:56:41.535815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.535900 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:56:41.535891513 +0000 UTC m=+439.518495294 I0420 10:56:41.709032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jqgsp" condition "Approved" to 2026-04-20 10:56:41.709012535 +0000 UTC m=+439.691616366 I0420 10:56:41.735394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.737179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jqgsp" condition "Ready" to 2026-04-20 10:56:41.737167769 +0000 UTC m=+439.719771560 I0420 10:56:41.775789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-95zwq" condition "Approved" to 2026-04-20 10:56:41.775774353 +0000 UTC m=+439.758378154 I0420 10:56:41.778030 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:41.778022227 +0000 UTC m=+439.760626028 I0420 10:56:41.794635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-95zwq" condition "Ready" to 2026-04-20 10:56:41.794616964 +0000 UTC m=+439.777220795 I0420 10:56:41.802357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.802524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.802786 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:41.80278023 +0000 UTC m=+439.785384021 I0420 10:56:41.825921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:41.859965 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:41.859950877 +0000 UTC m=+439.842554678 I0420 10:56:41.913206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-48skc" condition "Approved" to 2026-04-20 10:56:41.913184161 +0000 UTC m=+439.895787962 E0420 10:56:41.951920 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-jc282\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0420 10:56:42.063953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:42.325417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-48skc" condition "Ready" to 2026-04-20 10:56:42.325405463 +0000 UTC m=+440.308009264 I0420 10:56:42.761648 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:42.761626841 +0000 UTC m=+440.744230642 I0420 10:56:42.959579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:43.308582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:48.439273 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" condition "Ready" to 2026-04-20 10:56:48.439245615 +0000 UTC m=+446.421849436 I0420 10:56:48.439363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:56:48.439491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" condition "Issuing" to 2026-04-20 10:56:48.439474661 +0000 UTC m=+446.422078542 I0420 10:56:48.454400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmncr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:48.454522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" condition "Ready" to 2026-04-20 10:56:48.45451228 +0000 UTC m=+446.437116091 I0420 10:56:48.609068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmncr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:48.646092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cmncr-g74hk" condition "Approved" to 2026-04-20 10:56:48.646068693 +0000 UTC m=+446.628672494 I0420 10:56:48.668272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cmncr-g74hk" condition "Ready" to 2026-04-20 10:56:48.668260444 +0000 UTC m=+446.650864235 I0420 10:56:48.699229 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:48.699208624 +0000 UTC m=+446.681812425 I0420 10:56:48.721774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmncr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:56:48.722159 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:56:48.722146514 +0000 UTC m=+446.704750315 I0420 10:56:48.745671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmncr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmncr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:57:00.833360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:57:00.833338435 +0000 UTC m=+458.815942236 I0420 10:57:00.833467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:57:00.833522 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:57:00.833507098 +0000 UTC m=+458.816110929 I0420 10:57:00.857488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:57:00.857612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:57:00.857600243 +0000 UTC m=+458.840204054 I0420 10:57:00.940534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:57:00.975814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w9qpp" condition "Approved" to 2026-04-20 10:57:00.975791628 +0000 UTC m=+458.958395429 I0420 10:57:00.995875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w9qpp" condition "Ready" to 2026-04-20 10:57:00.995855826 +0000 UTC m=+458.978459647 I0420 10:57:01.038132 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:57:01.038104102 +0000 UTC m=+459.020707933 I0420 10:57:01.060961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:14.690469 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:58:14.69041207 +0000 UTC m=+532.673015891 I0420 10:58:14.690551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:58:14.690598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:58:14.690587905 +0000 UTC m=+532.673191736 I0420 10:58:14.707791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:14.708053 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:58:14.708016857 +0000 UTC m=+532.690620658 I0420 10:58:14.957991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:15.012095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zplgh" condition "Approved" to 2026-04-20 10:58:15.012078724 +0000 UTC m=+532.994682515 I0420 10:58:15.055785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zplgh" condition "Ready" to 2026-04-20 10:58:15.055765962 +0000 UTC m=+533.038369753 I0420 10:58:15.088932 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:58:15.088915516 +0000 UTC m=+533.071519317 I0420 10:58:15.112387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:15.112955 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:58:15.112943037 +0000 UTC m=+533.095546838 I0420 10:58:15.114187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:15.129593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:58:15.130086 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:58:15.130075592 +0000 UTC m=+533.112679383 I0420 10:58:15.131556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:09.090656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:09.090817 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 10:59:09.090805029 +0000 UTC m=+587.073408830 I0420 10:59:09.091460 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 10:59:09.091446435 +0000 UTC m=+587.074050236 I0420 10:59:09.117198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:09.117278 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 10:59:09.11726916 +0000 UTC m=+587.099872961 I0420 10:59:09.242416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:09.274524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ffglp" condition "Approved" to 2026-04-20 10:59:09.27450092 +0000 UTC m=+587.257104741 I0420 10:59:09.299888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ffglp" condition "Ready" to 2026-04-20 10:59:09.299872494 +0000 UTC m=+587.282476325 I0420 10:59:09.332688 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:09.332644169 +0000 UTC m=+587.315247980 I0420 10:59:09.358788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:09.359249 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:09.359238892 +0000 UTC m=+587.341842693 I0420 10:59:09.380384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:09.380748 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:09.380738734 +0000 UTC m=+587.363342525 I0420 10:59:21.514099 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-20 10:59:21.51405593 +0000 UTC m=+599.496659761 I0420 10:59:21.599825 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-20 10:59:21.599804778 +0000 UTC m=+599.582408569 I0420 10:59:21.601158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:21.601192 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-20 10:59:21.601179621 +0000 UTC m=+599.583783412 I0420 10:59:21.659353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:21.659442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:21.659459 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-20 10:59:21.659453602 +0000 UTC m=+599.642057383 E0420 10:59:21.671689 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0420 10:59:21.979944 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-20 10:59:21.979917827 +0000 UTC m=+599.962521648 E0420 10:59:22.015136 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0420 10:59:22.061310 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-20 10:59:22.061288799 +0000 UTC m=+600.043892600 I0420 10:59:22.061342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:22.061400 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-20 10:59:22.061387261 +0000 UTC m=+600.043991082 I0420 10:59:22.090626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:22.090707 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-20 10:59:22.090697811 +0000 UTC m=+600.073301602 I0420 10:59:22.615451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:22.657394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nshjs" condition "Approved" to 2026-04-20 10:59:22.657380701 +0000 UTC m=+600.639984502 I0420 10:59:22.689502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nshjs" condition "Ready" to 2026-04-20 10:59:22.689489609 +0000 UTC m=+600.672093410 I0420 10:59:22.740822 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:22.740808592 +0000 UTC m=+600.723412393 I0420 10:59:22.803226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:22.803534 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:22.803528873 +0000 UTC m=+600.786132664 I0420 10:59:22.851403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:23.108129 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-20 10:59:23.108110041 +0000 UTC m=+601.090713822 I0420 10:59:23.135713 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-20 10:59:23.135646969 +0000 UTC m=+601.118250800 I0420 10:59:23.136350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:23.136436 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-20 10:59:23.136385796 +0000 UTC m=+601.118989597 I0420 10:59:23.171457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:23.171525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:23.171541 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-20 10:59:23.171535098 +0000 UTC m=+601.154138889 I0420 10:59:23.865171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2wgzw" condition "Approved" to 2026-04-20 10:59:23.865155935 +0000 UTC m=+601.847759726 I0420 10:59:23.905386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2wgzw" condition "Ready" to 2026-04-20 10:59:23.905374449 +0000 UTC m=+601.887978240 I0420 10:59:23.927094 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-20 10:59:23.927087755 +0000 UTC m=+601.909691546 I0420 10:59:23.956337 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:23.956284482 +0000 UTC m=+601.938888273 I0420 10:59:23.975308 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-20 10:59:23.975295543 +0000 UTC m=+601.957899334 I0420 10:59:23.975600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:23.975647 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-20 10:59:23.975636501 +0000 UTC m=+601.958240292 I0420 10:59:24.013786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.013865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:24.013891 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-20 10:59:24.013882458 +0000 UTC m=+601.996486259 I0420 10:59:24.021463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.362514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lbbkv" condition "Approved" to 2026-04-20 10:59:24.362494824 +0000 UTC m=+602.345098625 I0420 10:59:24.393291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lbbkv" condition "Ready" to 2026-04-20 10:59:24.39327393 +0000 UTC m=+602.375877721 I0420 10:59:24.443755 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:24.443736752 +0000 UTC m=+602.426340553 I0420 10:59:24.464954 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-20 10:59:24.464934396 +0000 UTC m=+602.447538187 I0420 10:59:24.478128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.478372 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:24.478365491 +0000 UTC m=+602.460969282 I0420 10:59:24.559643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.629906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.632645 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-20 10:59:24.63263528 +0000 UTC m=+602.615239071 I0420 10:59:24.632695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:24.632724 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-20 10:59:24.632716042 +0000 UTC m=+602.615319833 I0420 10:59:24.864515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:24.864611 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-20 10:59:24.864601009 +0000 UTC m=+602.847204810 I0420 10:59:25.106855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:25.141935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-s9rwz" condition "Approved" to 2026-04-20 10:59:25.141921428 +0000 UTC m=+603.124525229 I0420 10:59:25.173606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-s9rwz" condition "Ready" to 2026-04-20 10:59:25.173587286 +0000 UTC m=+603.156191097 I0420 10:59:25.249616 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:25.249598448 +0000 UTC m=+603.232202239 I0420 10:59:25.347143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:25.347505 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:25.34749689 +0000 UTC m=+603.330100681 I0420 10:59:25.544717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:33.793719 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:59:33.793703642 +0000 UTC m=+611.776307443 I0420 10:59:33.793839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:59:33.793887 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 10:59:33.793874466 +0000 UTC m=+611.776478267 I0420 10:59:33.819134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:33.819204 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:59:33.819196469 +0000 UTC m=+611.801800260 I0420 10:59:34.046809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:34.082258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z4mz6" condition "Approved" to 2026-04-20 10:59:34.082237853 +0000 UTC m=+612.064841674 I0420 10:59:34.101395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z4mz6" condition "Ready" to 2026-04-20 10:59:34.101382267 +0000 UTC m=+612.083986068 I0420 10:59:34.135208 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:34.135190916 +0000 UTC m=+612.117794717 I0420 10:59:34.157852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:34.159560 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:34.159548545 +0000 UTC m=+612.142152346 I0420 10:59:34.175463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:34.178923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:59:34.179265 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:59:34.179253743 +0000 UTC m=+612.161857544 I0420 11:00:17.368744 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-20 11:00:17.36869527 +0000 UTC m=+655.351299071 I0420 11:00:17.369225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:00:17.369250 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-20 11:00:17.369245743 +0000 UTC m=+655.351849544 I0420 11:00:17.402265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:00:17.402486 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-20 11:00:17.402474722 +0000 UTC m=+655.385078523 I0420 11:00:17.659678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:00:17.768883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mkh7t" condition "Approved" to 2026-04-20 11:00:17.768862349 +0000 UTC m=+655.751466150 I0420 11:00:17.863373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mkh7t" condition "Ready" to 2026-04-20 11:00:17.863361619 +0000 UTC m=+655.845965420 I0420 11:00:17.963111 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:00:17.963089577 +0000 UTC m=+655.945693408 I0420 11:00:17.993573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:00:17.993893 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:00:17.993883687 +0000 UTC m=+655.976487488 I0420 11:00:18.001678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:00:18.013840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:00:18.014230 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:00:18.014218371 +0000 UTC m=+655.996822172 I0420 11:01:55.438597 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 11:01:55.438577659 +0000 UTC m=+753.421181450 I0420 11:01:55.439064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:01:55.439116 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 11:01:55.439104233 +0000 UTC m=+753.421708054 I0420 11:01:55.456423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:55.456616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:01:55.456670 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 11:01:55.45665902 +0000 UTC m=+753.439262831 I0420 11:01:55.612548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cgfnz" condition "Approved" to 2026-04-20 11:01:55.612533963 +0000 UTC m=+753.595137774 I0420 11:01:55.632511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cgfnz" condition "Ready" to 2026-04-20 11:01:55.63249189 +0000 UTC m=+753.615095711 I0420 11:01:55.669371 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:01:55.669354297 +0000 UTC m=+753.651958088 I0420 11:01:55.700743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:55.701038 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:01:55.701030517 +0000 UTC m=+753.683634318 I0420 11:01:55.715482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:55.742757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:57.632917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:01:57.632960 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-20 11:01:57.63295059 +0000 UTC m=+755.615554391 I0420 11:01:57.634355 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-20 11:01:57.634333893 +0000 UTC m=+755.616937684 I0420 11:01:57.654188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:57.654266 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-20 11:01:57.654259128 +0000 UTC m=+755.636862919 I0420 11:01:57.895664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:57.947175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fjflc" condition "Approved" to 2026-04-20 11:01:57.947152067 +0000 UTC m=+755.929755898 I0420 11:01:57.974165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fjflc" condition "Ready" to 2026-04-20 11:01:57.974145283 +0000 UTC m=+755.956749084 I0420 11:01:58.017899 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:01:58.017881668 +0000 UTC m=+756.000485459 I0420 11:01:58.058733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:01:58.059041 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:01:58.05903163 +0000 UTC m=+756.041635421 I0420 11:01:58.094355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:08.759788 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 11:02:08.759770371 +0000 UTC m=+766.742374162 I0420 11:02:08.759955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:08.759971 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 11:02:08.759967585 +0000 UTC m=+766.742571376 I0420 11:02:08.787221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:08.787483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:08.787550 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 11:02:08.787537366 +0000 UTC m=+766.770141187 I0420 11:02:09.120033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6vlz7" condition "Approved" to 2026-04-20 11:02:09.120009748 +0000 UTC m=+767.102613579 I0420 11:02:09.140137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6vlz7" condition "Ready" to 2026-04-20 11:02:09.140120297 +0000 UTC m=+767.122724118 I0420 11:02:09.171946 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:09.171925202 +0000 UTC m=+767.154529003 I0420 11:02:09.188598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:09.188992 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:09.188980327 +0000 UTC m=+767.171584128 I0420 11:02:09.208795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:09.210809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:50.151604 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-vnc" condition "Ready" to 2026-04-20 11:02:50.15158579 +0000 UTC m=+808.134189591 I0420 11:02:50.151902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:50.151951 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-vnc" condition "Issuing" to 2026-04-20 11:02:50.151940599 +0000 UTC m=+808.134544400 I0420 11:02:50.152300 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-api" condition "Ready" to 2026-04-20 11:02:50.152266486 +0000 UTC m=+808.134870317 I0420 11:02:50.152714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:50.152760 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-api" condition "Issuing" to 2026-04-20 11:02:50.152751389 +0000 UTC m=+808.135355220 I0420 11:02:50.167675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qzx5m-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:50.167966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:50.168002 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-vnc" condition "Issuing" to 2026-04-20 11:02:50.167991958 +0000 UTC m=+808.150595809 I0420 11:02:50.174517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qzx5m-api\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:50.174595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qzx5m-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:50.174620 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qzx5m-api" condition "Issuing" to 2026-04-20 11:02:50.174614708 +0000 UTC m=+808.157218519 I0420 11:02:50.346926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qzx5m-vnc-v85tp" condition "Approved" to 2026-04-20 11:02:50.346910128 +0000 UTC m=+808.329513929 I0420 11:02:50.367019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qzx5m-vnc-v85tp" condition "Ready" to 2026-04-20 11:02:50.367001375 +0000 UTC m=+808.349605166 I0420 11:02:50.400310 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-qzx5m-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:50.400288533 +0000 UTC m=+808.382892324 I0420 11:02:50.427082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-qzx5m-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qzx5m-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:50.541184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qzx5m-api-bjl7j" condition "Approved" to 2026-04-20 11:02:50.541159529 +0000 UTC m=+808.523763360 I0420 11:02:50.562832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qzx5m-api-bjl7j" condition "Ready" to 2026-04-20 11:02:50.562817155 +0000 UTC m=+808.545420956 I0420 11:02:50.596225 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-qzx5m-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:50.596204645 +0000 UTC m=+808.578808466 I0420 11:02:50.617486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-qzx5m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qzx5m-api\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:52.843815 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-20 11:02:52.843191367 +0000 UTC m=+810.825795188 I0420 11:02:52.844225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:52.844508 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-20 11:02:52.844476768 +0000 UTC m=+810.827080589 I0420 11:02:52.863604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:52.863746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:52.863786 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-20 11:02:52.863771296 +0000 UTC m=+810.846375127 I0420 11:02:53.001323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:53.013234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7qxxn" condition "Approved" to 2026-04-20 11:02:53.013211302 +0000 UTC m=+810.995815103 I0420 11:02:53.039351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7qxxn" condition "Ready" to 2026-04-20 11:02:53.039333385 +0000 UTC m=+811.021937176 I0420 11:02:53.081506 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:53.081486137 +0000 UTC m=+811.064089968 I0420 11:02:53.111861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:53.112174 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:53.112164352 +0000 UTC m=+811.094768153 I0420 11:02:53.121181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:53.134289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:54.327880 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-20 11:02:54.32785855 +0000 UTC m=+812.310462381 I0420 11:02:54.328587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:54.328640 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-20 11:02:54.328633248 +0000 UTC m=+812.311237069 I0420 11:02:54.344349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:54.344401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:02:54.344435 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-20 11:02:54.344428252 +0000 UTC m=+812.327032053 I0420 11:02:54.776245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:02:54.786552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-w8468" condition "Approved" to 2026-04-20 11:02:54.786521745 +0000 UTC m=+812.769125536 I0420 11:02:54.824785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-w8468" condition "Ready" to 2026-04-20 11:02:54.824773252 +0000 UTC m=+812.807377053 I0420 11:02:54.864729 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:02:54.864713732 +0000 UTC m=+812.847317533 I0420 11:02:54.885632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:15.260177 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-20 11:03:15.260155762 +0000 UTC m=+833.242759593 I0420 11:03:15.260485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:03:15.260517 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-20 11:03:15.260509931 +0000 UTC m=+833.243113752 I0420 11:03:15.275649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:15.275770 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-20 11:03:15.275758611 +0000 UTC m=+833.258362442 I0420 11:03:15.487065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:15.540525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-8v8lf" condition "Approved" to 2026-04-20 11:03:15.540493272 +0000 UTC m=+833.523097073 I0420 11:03:15.567575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-8v8lf" condition "Ready" to 2026-04-20 11:03:15.567559109 +0000 UTC m=+833.550162910 I0420 11:03:15.600216 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:03:15.60020164 +0000 UTC m=+833.582805431 I0420 11:03:15.638137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:15.704984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:17.672423 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-20 11:03:17.672402093 +0000 UTC m=+835.655005894 I0420 11:03:17.672614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:03:17.672650 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-20 11:03:17.672642599 +0000 UTC m=+835.655246400 I0420 11:03:17.695565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:17.695645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:03:17.695670 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-20 11:03:17.695661477 +0000 UTC m=+835.678265278 I0420 11:03:17.947819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-c8lf5" condition "Approved" to 2026-04-20 11:03:17.947798583 +0000 UTC m=+835.930402384 I0420 11:03:17.972558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-c8lf5" condition "Ready" to 2026-04-20 11:03:17.972534673 +0000 UTC m=+835.955138504 I0420 11:03:18.004928 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:03:18.004908889 +0000 UTC m=+835.987512690 I0420 11:03:18.042137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:18.042714 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:03:18.042698785 +0000 UTC m=+836.025302616 I0420 11:03:18.073805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:03:18.074146 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:03:18.074125478 +0000 UTC m=+836.056729269 I0420 11:03:18.080110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:04:07.473048 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-20 11:04:07.473034876 +0000 UTC m=+885.455638667 I0420 11:04:07.473510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:04:07.473563 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-20 11:04:07.473552949 +0000 UTC m=+885.456156740 I0420 11:04:07.494241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:04:07.494375 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-20 11:04:07.494344803 +0000 UTC m=+885.476948624 I0420 11:04:07.606295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:04:07.640580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4l28s" condition "Approved" to 2026-04-20 11:04:07.640559369 +0000 UTC m=+885.623163200 I0420 11:04:07.665294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4l28s" condition "Ready" to 2026-04-20 11:04:07.665278549 +0000 UTC m=+885.647882340 I0420 11:04:07.694554 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:04:07.694539048 +0000 UTC m=+885.677142839 I0420 11:04:07.720069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:04:07.721066 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:04:07.721052052 +0000 UTC m=+885.703655853 I0420 11:04:07.751203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"