I0417 02:40:09.249599 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 02:40:09.249730 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 02:40:09.249816 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 02:40:09.255113 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 02:40:09.255521 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 02:40:09.257454 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 02:40:09.258419 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 02:40:09.262640 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 02:40:09.275570 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 02:40:09.275855 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 02:40:09.280664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 02:40:09.288800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 02:40:09.291873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 02:40:09.295271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 02:40:09.297340 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 02:40:09.297374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 02:40:09.297397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 02:40:09.300920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 02:40:09.304612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 02:40:09.309683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 02:40:09.312954 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 02:40:09.315848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 02:40:09.313025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 02:40:09.317153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 02:40:09.319383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 02:40:09.321180 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 02:40:09.321208 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 02:40:09.321325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 02:40:09.323705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 02:40:09.327208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 02:40:09.331130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 02:40:09.333544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 02:40:09.336306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 02:40:09.338039 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.338909 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.340163 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.358240 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.393161 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.394452 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.405169 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.422399 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.460720 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:09.494743 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 02:40:28.857141 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 02:40:28.85712552 +0000 UTC m=+19.643789555 I0417 02:40:29.715096 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 02:40:29.715079501 +0000 UTC m=+20.501743556 I0417 02:40:29.716161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:29.716216 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 02:40:29.716209346 +0000 UTC m=+20.502873411 E0417 02:40:29.730715 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 02:40:29.730769 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 02:40:29.7307639 +0000 UTC m=+20.517427925 E0417 02:40:29.730791 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 02:40:29.731436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:29.731485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:29.731499 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 02:40:29.731495485 +0000 UTC m=+20.518159500 E0417 02:40:29.744817 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 02:40:29.746564 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 02:40:29.746601 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 02:40:29.746636 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 02:40:29.790405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-thwct" condition "Approved" to 2026-04-17 02:40:29.790389596 +0000 UTC m=+20.577053621 I0417 02:40:29.811768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-thwct" condition "Ready" to 2026-04-17 02:40:29.811752617 +0000 UTC m=+20.598416662 I0417 02:40:29.838521 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:29.838504074 +0000 UTC m=+20.625168089 I0417 02:40:29.856841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:34.181362 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 02:40:34.181343626 +0000 UTC m=+24.968007661 I0417 02:40:34.181464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:34.181549 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 02:40:34.181541181 +0000 UTC m=+24.968205246 I0417 02:40:34.193966 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 02:40:34.193952428 +0000 UTC m=+24.980616453 I0417 02:40:34.234232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:34.234300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:34.234320 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 02:40:34.234315469 +0000 UTC m=+25.020979494 I0417 02:40:34.540296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-scjh2" condition "Approved" to 2026-04-17 02:40:34.540282371 +0000 UTC m=+25.326946406 I0417 02:40:34.574651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-scjh2" condition "Ready" to 2026-04-17 02:40:34.574641282 +0000 UTC m=+25.361305307 I0417 02:40:34.603668 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:34.603651898 +0000 UTC m=+25.390315963 I0417 02:40:34.630611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:34.634103 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:34.632537142 +0000 UTC m=+25.419201197 I0417 02:40:34.652950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:34.653469 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:34.653453002 +0000 UTC m=+25.440117057 I0417 02:40:34.746102 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:34.746090351 +0000 UTC m=+25.532754386 I0417 02:40:40.088732 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 02:40:40.088704324 +0000 UTC m=+30.875368379 I0417 02:40:40.088902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:40.088967 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 02:40:40.08895492 +0000 UTC m=+30.875618975 E0417 02:40:40.104358 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 02:40:40.104415 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 02:40:40.104404593 +0000 UTC m=+30.891068658 I0417 02:40:40.104479 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 02:40:40.107496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.107646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:40.107706 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 02:40:40.107694454 +0000 UTC m=+30.894358509 E0417 02:40:40.118348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 02:40:40.118480 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 02:40:40.118533 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 02:40:40.118605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 02:40:40.126404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:40.126425 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 02:40:40.126420338 +0000 UTC m=+30.913084373 I0417 02:40:40.126405 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 02:40:40.126396358 +0000 UTC m=+30.913060393 I0417 02:40:40.149107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.149188 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 02:40:40.149179509 +0000 UTC m=+30.935843564 I0417 02:40:40.224775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.250296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hb2s2" condition "Approved" to 2026-04-17 02:40:40.25027491 +0000 UTC m=+31.036938965 I0417 02:40:40.269145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hb2s2" condition "Ready" to 2026-04-17 02:40:40.269130797 +0000 UTC m=+31.055794832 I0417 02:40:40.462740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-d45w9" condition "Approved" to 2026-04-17 02:40:40.462715574 +0000 UTC m=+31.249379609 I0417 02:40:40.491725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-d45w9" condition "Ready" to 2026-04-17 02:40:40.491708669 +0000 UTC m=+31.278372734 I0417 02:40:40.523764 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:40.52369104 +0000 UTC m=+31.310355105 I0417 02:40:40.549210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.549459 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:40.549452285 +0000 UTC m=+31.336116320 I0417 02:40:40.563569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.563811 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:40.563804225 +0000 UTC m=+31.350468260 I0417 02:40:40.635461 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 02:40:40.635438241 +0000 UTC m=+31.422102336 I0417 02:40:40.635684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:40.635745 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-17 02:40:40.635718017 +0000 UTC m=+31.422382082 I0417 02:40:40.656759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.657004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:40.657025 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-17 02:40:40.657018516 +0000 UTC m=+31.443682571 I0417 02:40:40.693692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:40.701651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-v2tzn" condition "Approved" to 2026-04-17 02:40:40.701634549 +0000 UTC m=+31.488298584 I0417 02:40:40.714295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-v2tzn" condition "Ready" to 2026-04-17 02:40:40.714290072 +0000 UTC m=+31.500954097 I0417 02:40:41.101049 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:41.101035287 +0000 UTC m=+31.887699322 I0417 02:40:41.201010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:41.292293 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-17 02:40:41.292275893 +0000 UTC m=+32.078939928 I0417 02:40:41.292776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:41.292798 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-17 02:40:41.292793394 +0000 UTC m=+32.079457439 I0417 02:40:41.396489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:41.396582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:40:41.396601 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-17 02:40:41.396594993 +0000 UTC m=+32.183259028 I0417 02:40:41.856022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-l4t6s" condition "Approved" to 2026-04-17 02:40:41.856000795 +0000 UTC m=+32.642664860 I0417 02:40:41.959347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-l4t6s" condition "Ready" to 2026-04-17 02:40:41.959332685 +0000 UTC m=+32.745996720 I0417 02:40:41.989952 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-17 02:40:41.989940365 +0000 UTC m=+32.776604400 I0417 02:40:42.497287 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:42.497271022 +0000 UTC m=+33.283935057 I0417 02:40:42.650550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:42.717991 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-17 02:40:42.717976464 +0000 UTC m=+33.504640499 I0417 02:40:43.108164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:45.119046 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:45.119025829 +0000 UTC m=+35.905689884 I0417 02:40:45.138476 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hb2s2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:45.138456728 +0000 UTC m=+35.925120763 I0417 02:40:45.171475 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:40:45.171451831 +0000 UTC m=+35.958115886 I0417 02:40:45.202530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:40:45.270164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:44:37.633844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready" to 2026-04-17 02:44:37.633816543 +0000 UTC m=+268.420480598 I0417 02:44:37.634653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-170.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:44:37.634696 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Issuing" to 2026-04-17 02:44:37.634688112 +0000 UTC m=+268.421352197 I0417 02:44:37.653095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:44:37.653167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready" to 2026-04-17 02:44:37.653156862 +0000 UTC m=+268.439820917 I0417 02:44:38.040515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:44:38.076625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-cw4z9" condition "Approved" to 2026-04-17 02:44:38.076607628 +0000 UTC m=+268.863271653 I0417 02:44:38.092850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-cw4z9" condition "Ready" to 2026-04-17 02:44:38.09283837 +0000 UTC m=+268.879502395 I0417 02:44:38.121078 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:44:38.121070162 +0000 UTC m=+268.907734197 I0417 02:44:38.144898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:51.071100 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 02:45:51.071078306 +0000 UTC m=+341.857742371 I0417 02:45:51.071325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:45:51.071356 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 02:45:51.071348741 +0000 UTC m=+341.858012766 E0417 02:45:51.082879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 02:45:51.082962 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 02:45:51.082952794 +0000 UTC m=+341.869616859 E0417 02:45:51.082993 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 02:45:51.085902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:51.085992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:45:51.086018 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 02:45:51.08601167 +0000 UTC m=+341.872675695 E0417 02:45:51.091337 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 02:45:51.091416 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 02:45:51.091446 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 02:45:51.091478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 02:45:51.123389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:51.124226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rhzhs" condition "Approved" to 2026-04-17 02:45:51.124213706 +0000 UTC m=+341.910877741 I0417 02:45:51.136913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rhzhs" condition "Ready" to 2026-04-17 02:45:51.136897751 +0000 UTC m=+341.923561816 I0417 02:45:51.163060 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:45:51.163043127 +0000 UTC m=+341.949707162 I0417 02:45:51.181007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:51.181243 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:45:51.181235482 +0000 UTC m=+341.967899517 I0417 02:45:51.195731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:51.197777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:45:56.092286 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:45:56.09227215 +0000 UTC m=+346.878936205 I0417 02:46:30.859364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:30.859414 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 02:46:30.859408929 +0000 UTC m=+381.646072954 I0417 02:46:30.860181 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 02:46:30.860176877 +0000 UTC m=+381.646840902 I0417 02:46:30.872159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:30.872196 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 02:46:30.872189567 +0000 UTC m=+381.658853592 I0417 02:46:30.872444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 02:46:30.872425842 +0000 UTC m=+381.659089867 I0417 02:46:30.879407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:30.879443 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 02:46:30.879437134 +0000 UTC m=+381.666101149 I0417 02:46:30.879679 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 02:46:30.879669249 +0000 UTC m=+381.666333274 I0417 02:46:30.928977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:30.929035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:30.929055 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 02:46:30.929049237 +0000 UTC m=+381.715713272 I0417 02:46:30.929973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:30.930018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 02:46:30.930013259 +0000 UTC m=+381.716677284 I0417 02:46:30.947981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:30.948068 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 02:46:30.948059629 +0000 UTC m=+381.734723664 I0417 02:46:31.055990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:31.064089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:31.090632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sg696" condition "Approved" to 2026-04-17 02:46:31.090613926 +0000 UTC m=+381.877277961 I0417 02:46:31.110305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p9zvp" condition "Approved" to 2026-04-17 02:46:31.110285892 +0000 UTC m=+381.896949957 I0417 02:46:31.111776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sg696" condition "Ready" to 2026-04-17 02:46:31.111763934 +0000 UTC m=+381.898427979 I0417 02:46:31.133095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p9zvp" condition "Ready" to 2026-04-17 02:46:31.133080025 +0000 UTC m=+381.919744060 I0417 02:46:31.139313 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:31.13929888 +0000 UTC m=+381.925962915 I0417 02:46:31.173103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:31.173459 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:31.17344984 +0000 UTC m=+381.960113875 I0417 02:46:31.254679 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:31.254654658 +0000 UTC m=+382.041318723 I0417 02:46:31.293808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:31.294660 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:31.294646684 +0000 UTC m=+382.081310729 I0417 02:46:31.354274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nn4lt" condition "Approved" to 2026-04-17 02:46:31.354257684 +0000 UTC m=+382.140921729 I0417 02:46:31.444969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:31.445499 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:31.44549087 +0000 UTC m=+382.232154905 I0417 02:46:31.545572 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" condition "Ready" to 2026-04-17 02:46:31.545553316 +0000 UTC m=+382.332217351 I0417 02:46:31.545589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:31.545625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" condition "Issuing" to 2026-04-17 02:46:31.545616978 +0000 UTC m=+382.332281013 I0417 02:46:31.551099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nn4lt" condition "Ready" to 2026-04-17 02:46:31.551087166 +0000 UTC m=+382.337751201 I0417 02:46:32.095569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96r6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:32.095677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:32.095717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" condition "Issuing" to 2026-04-17 02:46:32.09570961 +0000 UTC m=+382.882373665 I0417 02:46:32.299634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:32.396790 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:32.396778988 +0000 UTC m=+383.183443023 I0417 02:46:32.601943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:32.602527 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:32.602519833 +0000 UTC m=+383.389183868 I0417 02:46:32.899184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:32.944314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:33.148518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-96r6h-5xxtc" condition "Approved" to 2026-04-17 02:46:33.148500006 +0000 UTC m=+383.935164041 I0417 02:46:33.407677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-96r6h-5xxtc" condition "Ready" to 2026-04-17 02:46:33.407666827 +0000 UTC m=+384.194330852 I0417 02:46:33.694986 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:33.694973628 +0000 UTC m=+384.481637683 I0417 02:46:33.792617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96r6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:33.793185 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:33.793173454 +0000 UTC m=+384.579837489 I0417 02:46:33.993308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96r6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96r6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:40.048793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 02:46:40.048773314 +0000 UTC m=+390.835437379 I0417 02:46:40.048920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:40.048957 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 02:46:40.048948028 +0000 UTC m=+390.835612063 I0417 02:46:40.063096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:40.063151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:46:40.063166 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 02:46:40.063160096 +0000 UTC m=+390.849824131 I0417 02:46:40.323110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nvmkz" condition "Approved" to 2026-04-17 02:46:40.323096411 +0000 UTC m=+391.109760446 I0417 02:46:40.342019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nvmkz" condition "Ready" to 2026-04-17 02:46:40.342003881 +0000 UTC m=+391.128667916 I0417 02:46:40.368147 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:40.368131648 +0000 UTC m=+391.154795683 I0417 02:46:40.387895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:40.388269 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:46:40.388259194 +0000 UTC m=+391.174923229 I0417 02:46:40.401625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:46:40.407904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:07.928696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:48:07.928700 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 02:48:07.928665967 +0000 UTC m=+478.715330002 I0417 02:48:07.928722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 02:48:07.928718218 +0000 UTC m=+478.715382243 I0417 02:48:07.950697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:07.950776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:48:07.950803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 02:48:07.950795277 +0000 UTC m=+478.737459312 I0417 02:48:08.205456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:08.216731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-45bwz" condition "Approved" to 2026-04-17 02:48:08.216721302 +0000 UTC m=+479.003385327 I0417 02:48:08.234844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-45bwz" condition "Ready" to 2026-04-17 02:48:08.234828084 +0000 UTC m=+479.021492129 I0417 02:48:08.261254 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:48:08.261241667 +0000 UTC m=+479.047905702 I0417 02:48:08.278281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:08.278560 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:48:08.278552832 +0000 UTC m=+479.065216857 I0417 02:48:08.299901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:49.598785 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 02:48:49.598768837 +0000 UTC m=+520.385432912 I0417 02:48:49.598862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:48:49.598899 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 02:48:49.598888989 +0000 UTC m=+520.385553024 I0417 02:48:49.615816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:49.615863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:48:49.615878 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 02:48:49.615872043 +0000 UTC m=+520.402536078 I0417 02:48:49.796333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:49.805246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xshf4" condition "Approved" to 2026-04-17 02:48:49.805230851 +0000 UTC m=+520.591894876 I0417 02:48:49.823244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xshf4" condition "Ready" to 2026-04-17 02:48:49.823231196 +0000 UTC m=+520.609895241 I0417 02:48:49.854116 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:48:49.854105487 +0000 UTC m=+520.640769522 I0417 02:48:49.868259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:49.870310 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:48:49.870296325 +0000 UTC m=+520.656960370 I0417 02:48:49.887152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:48:49.887414 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:48:49.887407241 +0000 UTC m=+520.674071276 I0417 02:49:59.850281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:49:59.850305 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-17 02:49:59.850259552 +0000 UTC m=+590.636923577 I0417 02:49:59.850317 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-17 02:49:59.850308573 +0000 UTC m=+590.636972608 I0417 02:49:59.874499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:49:59.874571 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-17 02:49:59.874563371 +0000 UTC m=+590.661227396 I0417 02:50:00.319615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:50:00.354360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-dx2gx" condition "Approved" to 2026-04-17 02:50:00.354350922 +0000 UTC m=+591.141014937 I0417 02:50:00.373031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-dx2gx" condition "Ready" to 2026-04-17 02:50:00.373024721 +0000 UTC m=+591.159688746 I0417 02:50:00.414768 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:50:00.414749045 +0000 UTC m=+591.201413100 I0417 02:50:00.487711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:50:00.488178 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:50:00.488159478 +0000 UTC m=+591.274823513 I0417 02:50:00.592147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:50:52.585598 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 02:50:52.585581386 +0000 UTC m=+643.372245421 I0417 02:50:52.585713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:50:52.585752 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 02:50:52.585744239 +0000 UTC m=+643.372408284 I0417 02:50:52.602632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:50:52.602771 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 02:50:52.602757115 +0000 UTC m=+643.389421180 I0417 02:50:52.803130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:50:52.850200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v42kx" condition "Approved" to 2026-04-17 02:50:52.850151205 +0000 UTC m=+643.636815240 I0417 02:50:52.869339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v42kx" condition "Ready" to 2026-04-17 02:50:52.869326095 +0000 UTC m=+643.655990130 I0417 02:50:52.902717 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:50:52.902698511 +0000 UTC m=+643.689362566 I0417 02:50:52.927213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:51:11.845361 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 02:51:11.845332612 +0000 UTC m=+662.631996647 I0417 02:51:11.845478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:51:11.845504 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 02:51:11.845498395 +0000 UTC m=+662.632162430 I0417 02:51:11.863762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:51:11.863929 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 02:51:11.863918169 +0000 UTC m=+662.650582204 I0417 02:51:11.983366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:51:12.032765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-79g89" condition "Approved" to 2026-04-17 02:51:12.032751239 +0000 UTC m=+662.819415254 I0417 02:51:12.058409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-79g89" condition "Ready" to 2026-04-17 02:51:12.058377979 +0000 UTC m=+662.845042014 I0417 02:51:12.099216 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:51:12.099198434 +0000 UTC m=+662.885862489 I0417 02:51:12.122908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:30.918431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:52:30.918467 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-17 02:52:30.918459356 +0000 UTC m=+741.705123391 I0417 02:52:30.918634 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-17 02:52:30.918589678 +0000 UTC m=+741.705253713 I0417 02:52:30.945668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:30.945810 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-17 02:52:30.945799872 +0000 UTC m=+741.732463897 I0417 02:52:31.285741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:31.324954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7f4p8" condition "Approved" to 2026-04-17 02:52:31.324944122 +0000 UTC m=+742.111608147 I0417 02:52:31.343602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7f4p8" condition "Ready" to 2026-04-17 02:52:31.343592372 +0000 UTC m=+742.130256407 I0417 02:52:31.372958 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:52:31.37294018 +0000 UTC m=+742.159604235 I0417 02:52:31.391618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:31.436568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:32.231058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:52:32.231096 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-17 02:52:32.231089262 +0000 UTC m=+743.017753277 I0417 02:52:32.231495 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-17 02:52:32.23147431 +0000 UTC m=+743.018138365 I0417 02:52:32.252210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:32.252289 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-17 02:52:32.252281806 +0000 UTC m=+743.038945831 I0417 02:52:32.406411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:32.435120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-8rnhz" condition "Approved" to 2026-04-17 02:52:32.435094427 +0000 UTC m=+743.221758452 I0417 02:52:32.463218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-8rnhz" condition "Ready" to 2026-04-17 02:52:32.463203199 +0000 UTC m=+743.249867234 I0417 02:52:32.489149 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:52:32.489140646 +0000 UTC m=+743.275804691 I0417 02:52:32.508327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:32.508601 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:52:32.508595003 +0000 UTC m=+743.295259048 I0417 02:52:32.516918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:52:32.527337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:53:46.064236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:53:46.064292 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-17 02:53:46.064271417 +0000 UTC m=+816.850935472 I0417 02:53:46.064593 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-17 02:53:46.064584394 +0000 UTC m=+816.851248449 I0417 02:53:46.082381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:53:46.082498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:53:46.082534 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-17 02:53:46.082523497 +0000 UTC m=+816.869187562 I0417 02:53:46.288515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-m9mjf" condition "Approved" to 2026-04-17 02:53:46.28849718 +0000 UTC m=+817.075161205 I0417 02:53:46.316207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-m9mjf" condition "Ready" to 2026-04-17 02:53:46.316195613 +0000 UTC m=+817.102859648 I0417 02:53:46.354157 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:53:46.354143665 +0000 UTC m=+817.140807690 I0417 02:53:46.382643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:53:46.382970 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:53:46.382963953 +0000 UTC m=+817.169627978 I0417 02:53:46.390202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:53:46.417910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:53:46.418232 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:53:46.418224788 +0000 UTC m=+817.204888813 I0417 02:54:37.098900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:37.098938 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 02:54:37.098930809 +0000 UTC m=+867.885594834 I0417 02:54:37.099529 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-17 02:54:37.099523881 +0000 UTC m=+867.886187906 I0417 02:54:37.137365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:37.137463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:37.137484 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 02:54:37.137478644 +0000 UTC m=+867.924142669 I0417 02:54:39.252360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vjvv7" condition "Approved" to 2026-04-17 02:54:39.25234758 +0000 UTC m=+870.039011605 I0417 02:54:39.271094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vjvv7" condition "Ready" to 2026-04-17 02:54:39.271081261 +0000 UTC m=+870.057745296 I0417 02:54:39.305261 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:39.305244073 +0000 UTC m=+870.091908098 I0417 02:54:39.326488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:39.327290 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:39.327281585 +0000 UTC m=+870.113945620 I0417 02:54:39.352934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:39.357713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:40.965305 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-17 02:54:40.965285258 +0000 UTC m=+871.751949273 I0417 02:54:40.991173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:40.991202 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-17 02:54:40.991196983 +0000 UTC m=+871.777861008 I0417 02:54:40.991210 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 02:54:40.991193373 +0000 UTC m=+871.777857408 I0417 02:54:41.012146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:41.012270 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 02:54:41.012260503 +0000 UTC m=+871.798924568 E0417 02:54:41.025734 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0417 02:54:41.156669 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-17 02:54:41.156639486 +0000 UTC m=+871.943303551 I0417 02:54:41.258327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:41.258427 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-17 02:54:41.258420676 +0000 UTC m=+872.045084701 I0417 02:54:41.258694 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-17 02:54:41.258690891 +0000 UTC m=+872.045354916 I0417 02:54:41.275034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:41.275108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:41.275131 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-17 02:54:41.275124114 +0000 UTC m=+872.061788149 E0417 02:54:41.338671 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0417 02:54:41.426519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q97cp" condition "Approved" to 2026-04-17 02:54:41.426500246 +0000 UTC m=+872.213164281 I0417 02:54:41.463003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q97cp" condition "Ready" to 2026-04-17 02:54:41.462994097 +0000 UTC m=+872.249658112 I0417 02:54:41.501726 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:41.501713847 +0000 UTC m=+872.288377872 I0417 02:54:41.537742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:41.538057 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:41.538049705 +0000 UTC m=+872.324713730 I0417 02:54:41.556090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.118845 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-17 02:54:42.118823184 +0000 UTC m=+872.905487239 I0417 02:54:42.149798 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-17 02:54:42.149782748 +0000 UTC m=+872.936446763 I0417 02:54:42.150106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:42.150120 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-17 02:54:42.150117105 +0000 UTC m=+872.936781120 I0417 02:54:42.168376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.168465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:42.168490 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-17 02:54:42.168484758 +0000 UTC m=+872.955148793 I0417 02:54:42.497000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s7z96" condition "Approved" to 2026-04-17 02:54:42.496978543 +0000 UTC m=+873.283642608 I0417 02:54:42.523208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s7z96" condition "Ready" to 2026-04-17 02:54:42.523193815 +0000 UTC m=+873.309857840 I0417 02:54:42.569133 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:42.569119208 +0000 UTC m=+873.355783243 I0417 02:54:42.597121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.597885 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:42.597862924 +0000 UTC m=+873.384526959 I0417 02:54:42.625055 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-17 02:54:42.625022626 +0000 UTC m=+873.411686661 I0417 02:54:42.635040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.635781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.651473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:42.651498 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-17 02:54:42.651492713 +0000 UTC m=+873.438156738 I0417 02:54:42.652506 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-17 02:54:42.652502165 +0000 UTC m=+873.439166190 I0417 02:54:42.675432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.675508 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-17 02:54:42.675499887 +0000 UTC m=+873.462163912 I0417 02:54:42.925855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:42.984519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-475ft" condition "Approved" to 2026-04-17 02:54:42.984483215 +0000 UTC m=+873.771147270 I0417 02:54:43.012269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-475ft" condition "Ready" to 2026-04-17 02:54:43.01225787 +0000 UTC m=+873.798921885 I0417 02:54:43.055052 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:43.055026146 +0000 UTC m=+873.841690171 I0417 02:54:43.101717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:43.102002 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:43.101996541 +0000 UTC m=+873.888660556 I0417 02:54:43.166746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:43.167044 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:43.167037015 +0000 UTC m=+873.953701040 I0417 02:54:43.167383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:43.189629 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-17 02:54:43.189612299 +0000 UTC m=+873.976276324 I0417 02:54:43.233366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:43.233396 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 02:54:43.233389366 +0000 UTC m=+874.020053391 I0417 02:54:43.233753 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-17 02:54:43.233748593 +0000 UTC m=+874.020412618 I0417 02:54:43.249424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:43.249481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:43.249496 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 02:54:43.249490011 +0000 UTC m=+874.036154046 I0417 02:54:43.614845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h5hdd" condition "Approved" to 2026-04-17 02:54:43.614827876 +0000 UTC m=+874.401491901 I0417 02:54:43.638719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h5hdd" condition "Ready" to 2026-04-17 02:54:43.638710307 +0000 UTC m=+874.425374332 I0417 02:54:44.028897 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:44.028880263 +0000 UTC m=+874.815544288 I0417 02:54:44.199406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:44.199707 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:44.199698922 +0000 UTC m=+874.986362947 I0417 02:54:44.434650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:44.480683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:45.017793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:54:45.017829 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 02:54:45.017823155 +0000 UTC m=+875.804487190 I0417 02:54:45.017855 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 02:54:45.01762519 +0000 UTC m=+875.804289225 I0417 02:54:45.034768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:45.034885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 02:54:45.03487066 +0000 UTC m=+875.821534685 I0417 02:54:45.184235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:45.255532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7tzlh" condition "Approved" to 2026-04-17 02:54:45.255509296 +0000 UTC m=+876.042173351 I0417 02:54:45.276682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7tzlh" condition "Ready" to 2026-04-17 02:54:45.276664709 +0000 UTC m=+876.063328744 I0417 02:54:45.625621 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:45.625604282 +0000 UTC m=+876.412268317 I0417 02:54:45.725874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:45.726190 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:54:45.726181937 +0000 UTC m=+876.512845962 I0417 02:54:45.976815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:54:46.026566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:12.700944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:12.701032 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-17 02:57:12.701011356 +0000 UTC m=+1023.487675381 I0417 02:57:12.701008 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 02:57:12.700992926 +0000 UTC m=+1023.487656991 I0417 02:57:12.725469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:12.725575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:12.725745 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 02:57:12.725591462 +0000 UTC m=+1023.512255517 I0417 02:57:13.073378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-dkkrm" condition "Approved" to 2026-04-17 02:57:13.073194678 +0000 UTC m=+1023.859858743 I0417 02:57:13.092802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-dkkrm" condition "Ready" to 2026-04-17 02:57:13.092786708 +0000 UTC m=+1023.879450743 I0417 02:57:13.126529 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:13.12650723 +0000 UTC m=+1023.913171295 I0417 02:57:13.151344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:13.151738 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:13.15172978 +0000 UTC m=+1023.938393845 I0417 02:57:13.170820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:13.178261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:14.085443 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-17 02:57:14.085422281 +0000 UTC m=+1024.872086336 I0417 02:57:14.085647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:14.085721 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-17 02:57:14.085708837 +0000 UTC m=+1024.872372892 I0417 02:57:14.102439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:14.102581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:14.102639 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-17 02:57:14.10263493 +0000 UTC m=+1024.889298945 I0417 02:57:14.366916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-klx47" condition "Approved" to 2026-04-17 02:57:14.36688203 +0000 UTC m=+1025.153546075 I0417 02:57:14.387210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-klx47" condition "Ready" to 2026-04-17 02:57:14.387199595 +0000 UTC m=+1025.173863620 I0417 02:57:14.419090 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:14.419068639 +0000 UTC m=+1025.205732664 I0417 02:57:14.444690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:14.445591 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:14.445574926 +0000 UTC m=+1025.232238981 I0417 02:57:14.470144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:14.470264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:14.470603 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:14.470593952 +0000 UTC m=+1025.257257987 I0417 02:57:49.194908 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-17 02:57:49.194852001 +0000 UTC m=+1059.981516066 I0417 02:57:49.195833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:49.195882 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 02:57:49.195874772 +0000 UTC m=+1059.982538827 I0417 02:57:49.219672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:49.219733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:49.219746 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 02:57:49.219741134 +0000 UTC m=+1060.006405169 I0417 02:57:49.489196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:49.494164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bb6wb" condition "Approved" to 2026-04-17 02:57:49.494146534 +0000 UTC m=+1060.280810599 I0417 02:57:49.520364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bb6wb" condition "Ready" to 2026-04-17 02:57:49.520352495 +0000 UTC m=+1060.307016520 I0417 02:57:49.568541 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:49.568525166 +0000 UTC m=+1060.355189201 I0417 02:57:49.590712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:49.591154 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:49.591143039 +0000 UTC m=+1060.377807094 I0417 02:57:49.616142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:49.621519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:51.476923 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-17 02:57:51.476911347 +0000 UTC m=+1062.263575372 I0417 02:57:51.477044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 02:57:51.477072 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-17 02:57:51.47706575 +0000 UTC m=+1062.263729765 I0417 02:57:51.495461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:51.495553 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-17 02:57:51.495544916 +0000 UTC m=+1062.282208951 I0417 02:57:51.673102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:51.711490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wmlsl" condition "Approved" to 2026-04-17 02:57:51.711472996 +0000 UTC m=+1062.498137031 I0417 02:57:51.731222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wmlsl" condition "Ready" to 2026-04-17 02:57:51.731209628 +0000 UTC m=+1062.517873653 I0417 02:57:51.764205 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 02:57:51.764190084 +0000 UTC m=+1062.550854119 I0417 02:57:51.788726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 02:57:51.845364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.340147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-82c7t-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:00:03.340205 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-api" condition "Issuing" to 2026-04-17 03:00:03.340199096 +0000 UTC m=+1194.126863121 I0417 03:00:03.340585 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-api" condition "Ready" to 2026-04-17 03:00:03.340581344 +0000 UTC m=+1194.127245369 I0417 03:00:03.340732 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Ready" to 2026-04-17 03:00:03.340729228 +0000 UTC m=+1194.127393253 I0417 03:00:03.340893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-82c7t-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:00:03.340908 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Issuing" to 2026-04-17 03:00:03.340905082 +0000 UTC m=+1194.127569107 I0417 03:00:03.372868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-82c7t-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.372974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-82c7t-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:00:03.373001 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Issuing" to 2026-04-17 03:00:03.372992988 +0000 UTC m=+1194.159657023 I0417 03:00:03.373900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-82c7t-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.373983 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-82c7t-api" condition "Ready" to 2026-04-17 03:00:03.373974108 +0000 UTC m=+1194.160638143 I0417 03:00:03.496207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-82c7t-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.534317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-82c7t-api-qlgl2" condition "Approved" to 2026-04-17 03:00:03.534262769 +0000 UTC m=+1194.320926804 I0417 03:00:03.559770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-82c7t-api-qlgl2" condition "Ready" to 2026-04-17 03:00:03.559759374 +0000 UTC m=+1194.346423399 I0417 03:00:03.589773 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-82c7t-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:03.589757595 +0000 UTC m=+1194.376421630 I0417 03:00:03.610719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-82c7t-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.611104 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-82c7t-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:03.611096612 +0000 UTC m=+1194.397760657 I0417 03:00:03.637226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-82c7t-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.679609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-82c7t-vnc-kgt89" condition "Approved" to 2026-04-17 03:00:03.679590417 +0000 UTC m=+1194.466254452 I0417 03:00:03.698175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-82c7t-vnc-kgt89" condition "Ready" to 2026-04-17 03:00:03.698158455 +0000 UTC m=+1194.484822520 I0417 03:00:03.730271 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:03.730256432 +0000 UTC m=+1194.516920457 I0417 03:00:03.746465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-82c7t-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.747792 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:03.747782817 +0000 UTC m=+1194.534446842 I0417 03:00:03.766088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-82c7t-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-82c7t-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:03.766537 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-82c7t-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:03.766527548 +0000 UTC m=+1194.553191593 I0417 03:00:47.840111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:00:47.840143 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-17 03:00:47.840136349 +0000 UTC m=+1238.626800384 I0417 03:00:47.840501 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-17 03:00:47.840495578 +0000 UTC m=+1238.627159613 I0417 03:00:47.866744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:47.866867 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-17 03:00:47.866857641 +0000 UTC m=+1238.653521666 I0417 03:00:48.029229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:48.067893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-q77mv" condition "Approved" to 2026-04-17 03:00:48.067875103 +0000 UTC m=+1238.854539158 I0417 03:00:48.086648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-q77mv" condition "Ready" to 2026-04-17 03:00:48.086631303 +0000 UTC m=+1238.873295348 I0417 03:00:48.116976 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:48.116959012 +0000 UTC m=+1238.903623077 I0417 03:00:48.146628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:48.147182 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:48.147174549 +0000 UTC m=+1238.933838574 I0417 03:00:48.162774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:00:48.163204 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:00:48.163195272 +0000 UTC m=+1238.949859317 I0417 03:02:00.853724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:02:00.853732 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-17 03:02:00.85371622 +0000 UTC m=+1311.640380275 I0417 03:02:00.853750 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-17 03:02:00.853745681 +0000 UTC m=+1311.640409706 E0417 03:02:00.867933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:00.867989 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-17 03:02:00.867975795 +0000 UTC m=+1311.654639830 I0417 03:02:00.868034 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:00.873957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:00.874146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:02:00.874208 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-17 03:02:00.874200828 +0000 UTC m=+1311.660864863 E0417 03:02:00.877238 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0417 03:02:00.877457 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:00.877581 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 03:02:00.877676 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0417 03:02:00.922858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tdf2t" condition "Approved" to 2026-04-17 03:02:00.922828109 +0000 UTC m=+1311.709492144 I0417 03:02:00.940496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tdf2t" condition "Ready" to 2026-04-17 03:02:00.940485356 +0000 UTC m=+1311.727149381 I0417 03:02:00.977622 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:00.97760711 +0000 UTC m=+1311.764271135 I0417 03:02:01.001552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:01.608173 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 03:02:01.60815494 +0000 UTC m=+1312.394818975 I0417 03:02:01.609056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:02:01.609087 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-17 03:02:01.60908007 +0000 UTC m=+1312.395744115 E0417 03:02:01.621068 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:01.621117 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-17 03:02:01.621108837 +0000 UTC m=+1312.407772882 I0417 03:02:01.621184 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:01.624892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:01.624980 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 03:02:01.6249724 +0000 UTC m=+1312.411636445 E0417 03:02:01.633380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0417 03:02:01.633651 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 03:02:01.633683 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 03:02:01.633731 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0417 03:02:01.649651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:01.649730 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 03:02:01.649721999 +0000 UTC m=+1312.436386034 I0417 03:02:01.650230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:01.666964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nzb4p" condition "Approved" to 2026-04-17 03:02:01.666952148 +0000 UTC m=+1312.453616183 I0417 03:02:01.681011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nzb4p" condition "Ready" to 2026-04-17 03:02:01.680992768 +0000 UTC m=+1312.467656833 I0417 03:02:01.709820 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:01.709798705 +0000 UTC m=+1312.496462740 I0417 03:02:01.732031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:02.400561 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 03:02:02.400544992 +0000 UTC m=+1313.187209027 I0417 03:02:02.400945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:02:02.400968 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-17 03:02:02.400963301 +0000 UTC m=+1313.187627336 I0417 03:02:02.413655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:02.413754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:02:02.413776 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-17 03:02:02.413769685 +0000 UTC m=+1313.200433720 I0417 03:02:02.466025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pkm2f" condition "Approved" to 2026-04-17 03:02:02.466005192 +0000 UTC m=+1313.252669217 I0417 03:02:02.488429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pkm2f" condition "Ready" to 2026-04-17 03:02:02.488415121 +0000 UTC m=+1313.275079156 I0417 03:02:05.878414 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:05.878397766 +0000 UTC m=+1316.665061861 I0417 03:02:05.891771 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-pkm2f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:05.891757521 +0000 UTC m=+1316.678421556 I0417 03:02:05.926078 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:05.926062046 +0000 UTC m=+1316.712726081 I0417 03:02:05.950197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:02:06.634783 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:02:06.634762147 +0000 UTC m=+1317.421426222 I0417 03:04:58.012483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:04:58.012539 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-17 03:04:58.012531934 +0000 UTC m=+1488.799195969 I0417 03:04:58.012556 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-17 03:04:58.012537874 +0000 UTC m=+1488.799201909 I0417 03:04:58.029030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:04:58.029149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:04:58.029234 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-17 03:04:58.029224331 +0000 UTC m=+1488.815888366 I0417 03:04:58.288215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:04:58.297298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-s9vkk" condition "Approved" to 2026-04-17 03:04:58.297277796 +0000 UTC m=+1489.083941831 I0417 03:04:58.318597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-s9vkk" condition "Ready" to 2026-04-17 03:04:58.318579571 +0000 UTC m=+1489.105243606 I0417 03:04:58.357497 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:04:58.357479543 +0000 UTC m=+1489.144143598 I0417 03:04:58.377950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:04:58.378605 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:04:58.378596195 +0000 UTC m=+1489.165260230 I0417 03:04:58.389303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:04:58.396295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:06:19.810941 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-17 03:06:19.810922299 +0000 UTC m=+1570.597586344 I0417 03:06:19.811430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:06:19.811471 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-17 03:06:19.811459431 +0000 UTC m=+1570.598123496 I0417 03:06:19.829327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:06:19.829620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 03:06:19.829661 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-17 03:06:19.82965363 +0000 UTC m=+1570.616317665 I0417 03:06:20.250000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-jppxj" condition "Approved" to 2026-04-17 03:06:20.249979191 +0000 UTC m=+1571.036643226 I0417 03:06:20.269807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-jppxj" condition "Ready" to 2026-04-17 03:06:20.269782464 +0000 UTC m=+1571.056446519 I0417 03:06:20.300632 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:06:20.300616834 +0000 UTC m=+1571.087280879 I0417 03:06:20.318356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 03:06:20.318765 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 03:06:20.318755812 +0000 UTC m=+1571.105419847 I0417 03:06:20.338526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"