I0425 11:30:09.319212 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0425 11:30:09.319408 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0425 11:30:09.319556 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0425 11:30:09.324157 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0425 11:30:09.324507 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0425 11:30:09.324685 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0425 11:30:09.324694 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0425 11:30:09.327048 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0425 11:30:09.388009 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0425 11:30:09.392739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0425 11:30:09.392799 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0425 11:30:09.392809 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0425 11:30:09.392925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0425 11:30:09.397170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0425 11:30:09.399013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0425 11:30:09.400759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0425 11:30:09.402551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0425 11:30:09.404419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0425 11:30:09.406002 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0425 11:30:09.406027 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0425 11:30:09.406269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0425 11:30:09.413281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0425 11:30:09.418644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0425 11:30:09.421021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0425 11:30:09.422820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0425 11:30:09.424584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0425 11:30:09.426275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0425 11:30:09.428145 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0425 11:30:09.428309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0425 11:30:09.430077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0425 11:30:09.436514 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0425 11:30:09.439662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0425 11:30:09.443421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0425 11:30:09.444141 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.445854 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.446133 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.446490 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.446620 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.447049 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.447485 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.447726 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.447911 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:09.575051 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 11:30:36.511421 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-25 11:30:36.511410498 +0000 UTC m=+27.229557637 I0425 11:30:40.229107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:40.229186 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 11:30:40.229176635 +0000 UTC m=+30.947323824 I0425 11:30:40.229202 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 11:30:40.229195405 +0000 UTC m=+30.947342564 I0425 11:30:40.451483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:40.452218 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 11:30:40.452182891 +0000 UTC m=+31.170330080 E0425 11:30:40.787489 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 11:30:40.787885 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-25 11:30:40.787872102 +0000 UTC m=+31.506019291 E0425 11:30:40.788157 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 11:30:41.121925 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0425 11:30:41.122124 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 11:30:41.122180 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 11:30:41.122232 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0425 11:30:41.187842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:41.676146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cncvn" condition "Approved" to 2026-04-25 11:30:41.676107421 +0000 UTC m=+32.394254680 I0425 11:30:41.873334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cncvn" condition "Ready" to 2026-04-25 11:30:41.873321351 +0000 UTC m=+32.591468510 I0425 11:30:42.318908 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:30:42.318891964 +0000 UTC m=+33.037039123 I0425 11:30:42.443499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:42.820057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:46.123122 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:30:46.123108489 +0000 UTC m=+36.841255648 I0425 11:30:54.283267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:54.283317 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 11:30:54.283306081 +0000 UTC m=+45.001453260 I0425 11:30:54.283443 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 11:30:54.283418024 +0000 UTC m=+45.001565183 I0425 11:30:54.312126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:54.312218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:54.312244 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 11:30:54.312234217 +0000 UTC m=+45.030381376 I0425 11:30:54.375998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:54.390187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-f52j2" condition "Approved" to 2026-04-25 11:30:54.390162836 +0000 UTC m=+45.108309995 I0425 11:30:54.453609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-f52j2" condition "Ready" to 2026-04-25 11:30:54.453597301 +0000 UTC m=+45.171744460 I0425 11:30:54.512443 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:30:54.512414514 +0000 UTC m=+45.230561693 I0425 11:30:54.605749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:55.953151 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 11:30:55.953135861 +0000 UTC m=+46.671283020 I0425 11:30:55.953333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:55.953357 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 11:30:55.953352196 +0000 UTC m=+46.671499355 I0425 11:30:55.967398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:55.987298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:55.987372 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 11:30:55.987365385 +0000 UTC m=+46.705512544 I0425 11:30:56.111944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:56.405060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lnq2m" condition "Approved" to 2026-04-25 11:30:56.405036074 +0000 UTC m=+47.123183253 I0425 11:30:56.425919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lnq2m" condition "Ready" to 2026-04-25 11:30:56.425903421 +0000 UTC m=+47.144050600 I0425 11:30:56.456892 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:30:56.456876311 +0000 UTC m=+47.175023470 I0425 11:30:56.578239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:56.739272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:56.881933 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-25 11:30:56.881909826 +0000 UTC m=+47.600056985 I0425 11:30:56.977586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:56.977587 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 11:30:56.97756113 +0000 UTC m=+47.695708289 I0425 11:30:56.977654 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 11:30:56.977640682 +0000 UTC m=+47.695787861 I0425 11:30:57.005912 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-25 11:30:57.005896022 +0000 UTC m=+47.724043171 I0425 11:30:57.016685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:57.016775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:30:57.016804 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 11:30:57.016793876 +0000 UTC m=+47.734941035 I0425 11:30:57.450708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:57.459192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qbzvm" condition "Approved" to 2026-04-25 11:30:57.459173566 +0000 UTC m=+48.177320725 I0425 11:30:57.495463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qbzvm" condition "Ready" to 2026-04-25 11:30:57.495449016 +0000 UTC m=+48.213596175 I0425 11:30:57.525101 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:30:57.525077536 +0000 UTC m=+48.243224695 I0425 11:30:57.551557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:57.607109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:30:57.669207 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-25 11:30:57.669190603 +0000 UTC m=+48.387337762 I0425 11:34:36.782663 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 11:34:36.78264466 +0000 UTC m=+267.500791809 I0425 11:34:36.783094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:34:36.783120 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 11:34:36.783116051 +0000 UTC m=+267.501263200 E0425 11:34:36.797301 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 11:34:36.797372 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-25 11:34:36.797364351 +0000 UTC m=+267.515511500 I0425 11:34:36.797419 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 11:34:36.800287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:36.800440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:34:36.800479 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 11:34:36.800469491 +0000 UTC m=+267.518616670 E0425 11:34:36.810310 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0425 11:34:36.810507 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 11:34:36.810547 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0425 11:34:36.811026 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0425 11:34:36.813083 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 11:34:36.813071464 +0000 UTC m=+267.531218643 I0425 11:34:36.813313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:34:36.813384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 11:34:36.813375081 +0000 UTC m=+267.531522240 I0425 11:34:36.832379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:36.832495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:34:36.832525 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 11:34:36.83251519 +0000 UTC m=+267.550662339 I0425 11:34:37.095559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2kg49" condition "Approved" to 2026-04-25 11:34:37.095536797 +0000 UTC m=+267.813683976 I0425 11:34:37.123113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2kg49" condition "Ready" to 2026-04-25 11:34:37.123096526 +0000 UTC m=+267.841243705 I0425 11:34:37.152587 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:34:37.152572468 +0000 UTC m=+267.870719617 I0425 11:34:37.175286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:37.223723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:37.655921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9rhbg" condition "Approved" to 2026-04-25 11:34:37.655908215 +0000 UTC m=+268.374055374 I0425 11:34:37.676434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9rhbg" condition "Ready" to 2026-04-25 11:34:37.676423636 +0000 UTC m=+268.394570795 I0425 11:34:41.811644 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:34:41.81162818 +0000 UTC m=+272.529775359 I0425 11:34:41.855488 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-9rhbg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:34:41.855468846 +0000 UTC m=+272.573616025 I0425 11:34:41.928388 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:34:41.928372946 +0000 UTC m=+272.646520125 I0425 11:34:42.076665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:42.077289 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:34:42.077277394 +0000 UTC m=+272.795424553 I0425 11:34:42.158865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:34:42.158961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:39:43.384748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:39:43.384856 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-25 11:39:43.384845333 +0000 UTC m=+574.102992532 I0425 11:39:43.384823 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-25 11:39:43.384798032 +0000 UTC m=+574.102945251 I0425 11:39:43.404238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:39:43.404334 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-25 11:39:43.404325471 +0000 UTC m=+574.122472630 I0425 11:39:43.809655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:39:43.841123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4wxnh" condition "Approved" to 2026-04-25 11:39:43.841064203 +0000 UTC m=+574.559211382 I0425 11:39:43.864662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4wxnh" condition "Ready" to 2026-04-25 11:39:43.864639473 +0000 UTC m=+574.582786622 I0425 11:39:43.897918 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:39:43.897896099 +0000 UTC m=+574.616043288 I0425 11:39:43.921378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:39:43.973877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:43:42.675232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:43:42.675307 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 11:43:42.675288827 +0000 UTC m=+813.393435986 I0425 11:43:42.675515 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 11:43:42.67543663 +0000 UTC m=+813.393583819 I0425 11:43:42.695150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:43:42.695486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:43:42.695651 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 11:43:42.695513974 +0000 UTC m=+813.413661153 I0425 11:43:42.827877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j76r2" condition "Approved" to 2026-04-25 11:43:42.827852818 +0000 UTC m=+813.545999997 I0425 11:43:42.850070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j76r2" condition "Ready" to 2026-04-25 11:43:42.850052849 +0000 UTC m=+813.568200038 I0425 11:43:42.881768 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:43:42.881744103 +0000 UTC m=+813.599891292 I0425 11:43:42.902236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:43:42.902543 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:43:42.902534012 +0000 UTC m=+813.620681181 I0425 11:43:42.926421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:44:42.033732 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 11:44:42.033720128 +0000 UTC m=+872.751867287 I0425 11:44:42.035535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:44:42.035586 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 11:44:42.03558128 +0000 UTC m=+872.753728429 I0425 11:44:42.056858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:44:42.056984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:44:42.057008 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 11:44:42.056998953 +0000 UTC m=+872.775146102 I0425 11:44:42.215242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5zd7n" condition "Approved" to 2026-04-25 11:44:42.215224751 +0000 UTC m=+872.933371940 I0425 11:44:42.250184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5zd7n" condition "Ready" to 2026-04-25 11:44:42.25017211 +0000 UTC m=+872.968319269 I0425 11:44:42.286348 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:44:42.286330945 +0000 UTC m=+873.004478124 I0425 11:44:42.319571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:11.083089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:45:11.083131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 11:45:11.083121221 +0000 UTC m=+901.801268380 I0425 11:45:11.083196 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-25 11:45:11.083182792 +0000 UTC m=+901.801329981 E0425 11:45:11.678284 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 11:45:11.678393 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-25 11:45:11.678376944 +0000 UTC m=+902.396524123 E0425 11:45:11.678496 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 11:45:11.681689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:11.681811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:45:11.681847 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 11:45:11.681832082 +0000 UTC m=+902.399979261 E0425 11:45:11.711942 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0425 11:45:11.712293 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 11:45:11.712336 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 11:45:11.712390 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0425 11:45:11.759612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9cqnj" condition "Approved" to 2026-04-25 11:45:11.759591776 +0000 UTC m=+902.477738935 I0425 11:45:11.776981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9cqnj" condition "Ready" to 2026-04-25 11:45:11.776963407 +0000 UTC m=+902.495110586 I0425 11:45:11.807003 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:45:11.806975554 +0000 UTC m=+902.525122713 I0425 11:45:11.825453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:11.887549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:16.713125 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:45:16.713104349 +0000 UTC m=+907.431251528 I0425 11:45:21.655260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-25 11:45:21.655242475 +0000 UTC m=+912.373389634 I0425 11:45:21.655719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:45:21.655762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-25 11:45:21.655752747 +0000 UTC m=+912.373899906 I0425 11:45:21.685608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:21.685790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:45:21.685888 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-25 11:45:21.685820695 +0000 UTC m=+912.403967854 I0425 11:45:22.083442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d9mll" condition "Approved" to 2026-04-25 11:45:22.083423061 +0000 UTC m=+912.801570220 I0425 11:45:22.106016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d9mll" condition "Ready" to 2026-04-25 11:45:22.10599673 +0000 UTC m=+912.824143909 I0425 11:45:22.139703 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:45:22.139685049 +0000 UTC m=+912.857832228 I0425 11:45:22.158749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:22.159375 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:45:22.159364103 +0000 UTC m=+912.877511272 I0425 11:45:22.176432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:45:22.187813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:39.880851 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-25 11:46:39.880828606 +0000 UTC m=+990.598975795 I0425 11:46:39.881179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:39.881261 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-25 11:46:39.881245495 +0000 UTC m=+990.599392674 I0425 11:46:39.930435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:39.930659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:39.930746 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-25 11:46:39.930734372 +0000 UTC m=+990.648881571 I0425 11:46:40.307116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rxqxx" condition "Approved" to 2026-04-25 11:46:40.307097526 +0000 UTC m=+991.025244685 I0425 11:46:40.355279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rxqxx" condition "Ready" to 2026-04-25 11:46:40.355262952 +0000 UTC m=+991.073410111 I0425 11:46:40.560566 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:40.560545246 +0000 UTC m=+991.278692405 I0425 11:46:40.633123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:40.633677 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:40.633667176 +0000 UTC m=+991.351814355 I0425 11:46:40.711393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:40.718080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:43.906403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-25 11:46:43.906385873 +0000 UTC m=+994.624533032 I0425 11:46:43.906961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:43.906988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-25 11:46:43.906984307 +0000 UTC m=+994.625131476 I0425 11:46:43.911934 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-25 11:46:43.911919848 +0000 UTC m=+994.630066987 I0425 11:46:43.912894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:43.912935 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-25 11:46:43.91292617 +0000 UTC m=+994.631073319 I0425 11:46:43.913293 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 11:46:43.913289389 +0000 UTC m=+994.631436538 I0425 11:46:43.913548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:43.913569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-25 11:46:43.913565176 +0000 UTC m=+994.631712325 I0425 11:46:44.050667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.053744 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-25 11:46:44.053718959 +0000 UTC m=+994.771866128 I0425 11:46:44.073459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.073526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:46:44.073548 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-25 11:46:44.073540126 +0000 UTC m=+994.791687285 I0425 11:46:44.083918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.084009 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 11:46:44.084001371 +0000 UTC m=+994.802148510 I0425 11:46:44.328479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.475559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.637057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-87cgq" condition "Approved" to 2026-04-25 11:46:44.637036173 +0000 UTC m=+995.355183332 I0425 11:46:44.678161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dvkqr" condition "Approved" to 2026-04-25 11:46:44.67814647 +0000 UTC m=+995.396293619 I0425 11:46:44.679056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.716253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-87cgq" condition "Ready" to 2026-04-25 11:46:44.71624024 +0000 UTC m=+995.434387399 I0425 11:46:44.716743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hj8pc" condition "Approved" to 2026-04-25 11:46:44.716736551 +0000 UTC m=+995.434883710 I0425 11:46:44.790908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dvkqr" condition "Ready" to 2026-04-25 11:46:44.790895015 +0000 UTC m=+995.509042174 I0425 11:46:44.821561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hj8pc" condition "Ready" to 2026-04-25 11:46:44.821550257 +0000 UTC m=+995.539697416 I0425 11:46:44.894155 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.894127585 +0000 UTC m=+995.612274754 I0425 11:46:44.927343 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.927326333 +0000 UTC m=+995.645473482 I0425 11:46:44.932639 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.932619523 +0000 UTC m=+995.650766672 I0425 11:46:44.957189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.957499 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.957492764 +0000 UTC m=+995.675639913 I0425 11:46:44.969638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.970654 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.970636591 +0000 UTC m=+995.688783780 I0425 11:46:44.992181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:44.993648 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:46:44.99364017 +0000 UTC m=+995.711787319 I0425 11:46:45.456870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:45.588115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:45.600327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:46:45.682222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:04.756819 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Ready" to 2026-04-25 11:47:04.756799589 +0000 UTC m=+1015.474946748 I0425 11:47:04.757334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:47:04.757357 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Issuing" to 2026-04-25 11:47:04.757352972 +0000 UTC m=+1015.475500131 I0425 11:47:04.777796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:04.777915 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Ready" to 2026-04-25 11:47:04.777908025 +0000 UTC m=+1015.496055164 I0425 11:47:04.863070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:04.898136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wqbvs-9rm6c" condition "Approved" to 2026-04-25 11:47:04.898117818 +0000 UTC m=+1015.616264977 I0425 11:47:04.917893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wqbvs-9rm6c" condition "Ready" to 2026-04-25 11:47:04.917880944 +0000 UTC m=+1015.636028093 I0425 11:47:04.958489 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:47:04.958474281 +0000 UTC m=+1015.676621450 I0425 11:47:04.988222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:04.988682 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:47:04.988671833 +0000 UTC m=+1015.706819012 I0425 11:47:05.011786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:05.012487 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:47:05.012471829 +0000 UTC m=+1015.730619018 I0425 11:47:05.013484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wqbvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:30.630558 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-25 11:47:30.63053297 +0000 UTC m=+1041.348680119 I0425 11:47:30.630781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:47:30.630814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-25 11:47:30.630806526 +0000 UTC m=+1041.348953715 I0425 11:47:30.672357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:30.672595 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-25 11:47:30.672579149 +0000 UTC m=+1041.390726338 I0425 11:47:30.946166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:30.991271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kc7kk" condition "Approved" to 2026-04-25 11:47:30.991254781 +0000 UTC m=+1041.709401930 I0425 11:47:31.014374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kc7kk" condition "Ready" to 2026-04-25 11:47:31.014362512 +0000 UTC m=+1041.732509661 I0425 11:47:31.060556 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:47:31.060537835 +0000 UTC m=+1041.778685024 I0425 11:47:31.094861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:31.095383 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:47:31.09537258 +0000 UTC m=+1041.813519739 I0425 11:47:31.156398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:47:31.156435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:48:38.698466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:48:38.698520 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-25 11:48:38.698513181 +0000 UTC m=+1109.416660340 I0425 11:48:38.698846 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-25 11:48:38.698828378 +0000 UTC m=+1109.416975537 I0425 11:48:38.718421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:48:38.718521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:48:38.718547 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-25 11:48:38.718538086 +0000 UTC m=+1109.436685265 I0425 11:48:38.954898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4fmkz" condition "Approved" to 2026-04-25 11:48:38.954862717 +0000 UTC m=+1109.673009866 I0425 11:48:38.981645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4fmkz" condition "Ready" to 2026-04-25 11:48:38.981634085 +0000 UTC m=+1109.699781234 I0425 11:48:39.016444 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:48:39.016429536 +0000 UTC m=+1109.734576685 I0425 11:48:39.042424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:11.411430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:49:11.411492 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-25 11:49:11.411480885 +0000 UTC m=+1142.129628064 I0425 11:49:11.411509 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-25 11:49:11.411490866 +0000 UTC m=+1142.129638025 I0425 11:49:11.429060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:11.429193 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-25 11:49:11.429182367 +0000 UTC m=+1142.147329526 I0425 11:49:11.543978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:11.576758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kcqsr" condition "Approved" to 2026-04-25 11:49:11.576730651 +0000 UTC m=+1142.294877830 I0425 11:49:11.601915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kcqsr" condition "Ready" to 2026-04-25 11:49:11.601895683 +0000 UTC m=+1142.320042872 I0425 11:49:11.638880 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:49:11.638855862 +0000 UTC m=+1142.357003041 I0425 11:49:11.664458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:11.731912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:28.783296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:49:28.783351 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-25 11:49:28.783337711 +0000 UTC m=+1159.501484900 I0425 11:49:28.784089 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-25 11:49:28.784068788 +0000 UTC m=+1159.502215937 I0425 11:49:28.803715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:28.803862 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-25 11:49:28.803851238 +0000 UTC m=+1159.521998397 I0425 11:49:28.967429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:29.009378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nslwf" condition "Approved" to 2026-04-25 11:49:29.009361917 +0000 UTC m=+1159.727509056 I0425 11:49:29.030823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nslwf" condition "Ready" to 2026-04-25 11:49:29.030803305 +0000 UTC m=+1159.748950484 I0425 11:49:29.071677 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:49:29.071658204 +0000 UTC m=+1159.789805363 I0425 11:49:29.091936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:29.092541 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:49:29.092531038 +0000 UTC m=+1159.810678227 I0425 11:49:29.111774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:29.113290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:30.207158 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-25 11:49:30.207142197 +0000 UTC m=+1160.925289336 I0425 11:49:30.207412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:49:30.207461 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-25 11:49:30.207448364 +0000 UTC m=+1160.925595543 I0425 11:49:30.231050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:49:30.231275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:49:30.231319 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-25 11:49:30.231292987 +0000 UTC m=+1160.949440156 I0425 11:49:30.464071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n7cts" condition "Approved" to 2026-04-25 11:49:30.464046336 +0000 UTC m=+1161.182193485 I0425 11:49:30.487333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n7cts" condition "Ready" to 2026-04-25 11:49:30.487320154 +0000 UTC m=+1161.205467313 I0425 11:49:30.520942 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:49:30.520922808 +0000 UTC m=+1161.239069997 I0425 11:49:30.546176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:51:24.650870 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-25 11:51:24.650855012 +0000 UTC m=+1275.369002201 I0425 11:51:24.651399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:51:24.651453 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-25 11:51:24.651442155 +0000 UTC m=+1275.369589334 I0425 11:51:24.671276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:51:24.671395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:51:24.671424 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-25 11:51:24.671416441 +0000 UTC m=+1275.389563620 I0425 11:51:24.846395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-6pt8k" condition "Approved" to 2026-04-25 11:51:24.846369949 +0000 UTC m=+1275.564517128 I0425 11:51:24.868760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-6pt8k" condition "Ready" to 2026-04-25 11:51:24.868740709 +0000 UTC m=+1275.586887898 I0425 11:51:24.904842 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:51:24.90482495 +0000 UTC m=+1275.622972099 I0425 11:51:24.926204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:51:24.926510 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:51:24.926499344 +0000 UTC m=+1275.644646503 I0425 11:51:24.950732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:03.868259 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-25 11:52:03.868247745 +0000 UTC m=+1314.586394894 I0425 11:52:03.868581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:03.868600 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-25 11:52:03.868597043 +0000 UTC m=+1314.586744192 I0425 11:52:03.898499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:03.898592 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-25 11:52:03.898585661 +0000 UTC m=+1314.616732810 I0425 11:52:05.190546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:05.237836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kdk7v" condition "Approved" to 2026-04-25 11:52:05.237816831 +0000 UTC m=+1315.955963990 I0425 11:52:05.263192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kdk7v" condition "Ready" to 2026-04-25 11:52:05.263177463 +0000 UTC m=+1315.981324622 I0425 11:52:05.299164 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:05.299148516 +0000 UTC m=+1316.017295665 I0425 11:52:05.318844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:05.319478 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:05.319472295 +0000 UTC m=+1316.037619454 I0425 11:52:05.351087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:13.304539 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-25 11:52:13.304514602 +0000 UTC m=+1324.022661751 I0425 11:52:13.322124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:13.322173 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-25 11:52:13.32216085 +0000 UTC m=+1324.040308009 I0425 11:52:13.322437 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-25 11:52:13.322406225 +0000 UTC m=+1324.040553414 I0425 11:52:13.340373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:13.340527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:13.340554 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-25 11:52:13.340545944 +0000 UTC m=+1324.058693103 E0425 11:52:13.353733 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0425 11:52:13.404455 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-25 11:52:13.404389706 +0000 UTC m=+1324.122536865 I0425 11:52:13.426765 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-25 11:52:13.426746611 +0000 UTC m=+1324.144893770 I0425 11:52:13.426837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:13.427033 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-25 11:52:13.427024157 +0000 UTC m=+1324.145171306 E0425 11:52:13.432467 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0425 11:52:13.440805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:13.440932 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-25 11:52:13.440922151 +0000 UTC m=+1324.159069310 I0425 11:52:13.779595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:13.858812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q7hn4" condition "Approved" to 2026-04-25 11:52:13.858802737 +0000 UTC m=+1324.576949886 I0425 11:52:13.899949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q7hn4" condition "Ready" to 2026-04-25 11:52:13.899934546 +0000 UTC m=+1324.618081725 I0425 11:52:13.954811 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:13.954798585 +0000 UTC m=+1324.672945734 I0425 11:52:13.988419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:13.988751 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:13.988744941 +0000 UTC m=+1324.706892090 I0425 11:52:14.008751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:14.009029 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:14.009021659 +0000 UTC m=+1324.727168808 I0425 11:52:14.018347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:14.391092 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-25 11:52:14.391075256 +0000 UTC m=+1325.109222415 I0425 11:52:14.420117 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-25 11:52:14.420100412 +0000 UTC m=+1325.138247571 I0425 11:52:14.420445 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:14.420504 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-25 11:52:14.420491061 +0000 UTC m=+1325.138638240 I0425 11:52:14.454547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:14.454619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:14.454634 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-25 11:52:14.454628001 +0000 UTC m=+1325.172775160 I0425 11:52:15.578313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:15.584577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rmfb5" condition "Approved" to 2026-04-25 11:52:15.584563445 +0000 UTC m=+1326.302710594 I0425 11:52:15.634359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rmfb5" condition "Ready" to 2026-04-25 11:52:15.63434426 +0000 UTC m=+1326.352491409 I0425 11:52:15.651042 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-25 11:52:15.651028607 +0000 UTC m=+1326.369175756 I0425 11:52:15.669416 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:15.669403092 +0000 UTC m=+1326.387550251 I0425 11:52:15.682513 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-25 11:52:15.682492907 +0000 UTC m=+1326.400640086 I0425 11:52:15.682973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:15.682996 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-25 11:52:15.682992649 +0000 UTC m=+1326.401139808 I0425 11:52:15.692768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:15.693071 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:15.693066096 +0000 UTC m=+1326.411213245 I0425 11:52:15.710254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:15.710349 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-25 11:52:15.710339706 +0000 UTC m=+1326.428486865 I0425 11:52:15.741586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:15.900524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:15.947749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wjdjr" condition "Approved" to 2026-04-25 11:52:15.947735376 +0000 UTC m=+1326.665882535 I0425 11:52:15.974950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wjdjr" condition "Ready" to 2026-04-25 11:52:15.974936901 +0000 UTC m=+1326.693084050 I0425 11:52:16.016998 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:16.0169856 +0000 UTC m=+1326.735132739 I0425 11:52:16.041155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:16.199806 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-25 11:52:16.199559953 +0000 UTC m=+1326.917707142 I0425 11:52:16.274240 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-25 11:52:16.274224429 +0000 UTC m=+1326.992371578 I0425 11:52:16.275510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:16.277078 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 11:52:16.275527278 +0000 UTC m=+1326.993674427 I0425 11:52:16.289596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:16.289693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:52:16.289723 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 11:52:16.289716548 +0000 UTC m=+1327.007863707 I0425 11:52:16.674398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kwb9x" condition "Approved" to 2026-04-25 11:52:16.674385014 +0000 UTC m=+1327.392532153 I0425 11:52:16.700620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:16.728286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kwb9x" condition "Ready" to 2026-04-25 11:52:16.724186569 +0000 UTC m=+1327.442333718 I0425 11:52:16.776866 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:52:16.776853888 +0000 UTC m=+1327.495001037 I0425 11:52:16.813302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:52:17.224692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:30.868224 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-25 11:55:30.868174318 +0000 UTC m=+1521.586321477 I0425 11:55:30.868649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:55:30.868715 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-25 11:55:30.868702111 +0000 UTC m=+1521.586849290 I0425 11:55:30.894912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:30.895034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:55:30.895064 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-25 11:55:30.895055135 +0000 UTC m=+1521.613202314 I0425 11:55:31.233051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wsqlk" condition "Approved" to 2026-04-25 11:55:31.233038487 +0000 UTC m=+1521.951185646 I0425 11:55:31.278095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wsqlk" condition "Ready" to 2026-04-25 11:55:31.278079994 +0000 UTC m=+1521.996227173 I0425 11:55:31.354529 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:55:31.35451502 +0000 UTC m=+1522.072662179 I0425 11:55:31.374723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:31.375422 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:55:31.375412691 +0000 UTC m=+1522.093559860 I0425 11:55:31.435257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:32.492518 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-25 11:55:32.492499736 +0000 UTC m=+1523.210646915 I0425 11:55:32.493207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:55:32.493246 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-25 11:55:32.493239273 +0000 UTC m=+1523.211386452 I0425 11:55:32.552484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:32.552556 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-25 11:55:32.552549722 +0000 UTC m=+1523.270696871 I0425 11:55:33.093536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:55:33.164985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-zvkzs" condition "Approved" to 2026-04-25 11:55:33.164974941 +0000 UTC m=+1523.883122080 I0425 11:55:33.187042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-zvkzs" condition "Ready" to 2026-04-25 11:55:33.187028799 +0000 UTC m=+1523.905175968 I0425 11:55:33.327952 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:55:33.32793584 +0000 UTC m=+1524.046083029 I0425 11:55:33.462649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:28.590742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:56:28.590797 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-25 11:56:28.590785288 +0000 UTC m=+1579.308932477 I0425 11:56:28.590932 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-25 11:56:28.59091668 +0000 UTC m=+1579.309063839 I0425 11:56:28.687525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:28.687592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:56:28.687604 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-25 11:56:28.687599043 +0000 UTC m=+1579.405746192 I0425 11:56:29.230798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4hm6j" condition "Approved" to 2026-04-25 11:56:29.230772627 +0000 UTC m=+1579.948919816 I0425 11:56:29.345760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4hm6j" condition "Ready" to 2026-04-25 11:56:29.345741593 +0000 UTC m=+1580.063888782 I0425 11:56:30.271789 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:56:30.271763391 +0000 UTC m=+1580.989910590 I0425 11:56:30.538004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:30.538435 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:56:30.538427111 +0000 UTC m=+1581.256574270 I0425 11:56:31.104404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:31.120822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:34.348340 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-25 11:56:34.348321702 +0000 UTC m=+1585.066468881 I0425 11:56:34.352376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:56:34.352407 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-25 11:56:34.352400264 +0000 UTC m=+1585.070547413 I0425 11:56:34.748409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:34.748465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 11:56:34.748477 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-25 11:56:34.748471976 +0000 UTC m=+1585.466619125 I0425 11:56:35.605314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-nrfjn" condition "Approved" to 2026-04-25 11:56:35.605301941 +0000 UTC m=+1586.323449090 I0425 11:56:35.605766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:35.872021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-nrfjn" condition "Ready" to 2026-04-25 11:56:35.872008774 +0000 UTC m=+1586.590155913 I0425 11:56:35.963382 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 11:56:35.963363726 +0000 UTC m=+1586.681510885 I0425 11:56:36.297067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 11:56:36.706165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"