I0702 10:09:27.917062 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 10:09:27.917220 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 10:09:27.917311 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 10:09:27.922735 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 10:09:27.923124 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 10:09:27.923176 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 10:09:27.923366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 10:09:27.928432 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 10:09:27.944654 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 10:09:27.949709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 10:09:27.953072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 10:09:27.957899 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 10:09:27.958090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 10:09:27.960312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 10:09:27.960453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 10:09:27.965930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 10:09:27.968080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 10:09:27.973533 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 10:09:27.973608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 10:09:27.975737 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 10:09:27.975794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 10:09:27.975925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 10:09:27.978105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 10:09:27.980141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 10:09:27.985595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 10:09:27.991021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 10:09:27.995179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 10:09:27.998262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 10:09:28.000157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 10:09:28.003259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 10:09:28.006385 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 10:09:28.006474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 10:09:28.008782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 10:09:28.013870 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.014188 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.014315 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.035061 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.050814 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.070204 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.086407 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.105777 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.117152 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:28.126337 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:09:40.609570 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 10:09:40.609554859 +0000 UTC m=+12.727386441 I0702 10:09:41.382042 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 10:09:41.382030177 +0000 UTC m=+13.499861739 I0702 10:09:41.382739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:09:41.382760 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:09:41.382755916 +0000 UTC m=+13.500587478 E0702 10:09:41.396425 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:09:41.396574 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 10:09:41.396546848 +0000 UTC m=+13.514378410 E0702 10:09:41.396615 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:09:41.401971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:09:41.402110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:09:41.402146 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:09:41.402137254 +0000 UTC m=+13.519968816 E0702 10:09:41.409669 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 10:09:41.410242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:09:41.410337 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:09:41.410375 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 10:09:41.439155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:09:41.445816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z8glq" condition "Approved" to 2026-07-02 10:09:41.445797788 +0000 UTC m=+13.563629330 I0702 10:09:41.458900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z8glq" condition "Ready" to 2026-07-02 10:09:41.458886422 +0000 UTC m=+13.576717984 I0702 10:09:41.485124 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:09:41.48511383 +0000 UTC m=+13.602945382 I0702 10:09:41.503906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:09:41.504431 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:09:41.504422245 +0000 UTC m=+13.622253807 I0702 10:09:41.518341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:09:46.410162 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:09:46.410148474 +0000 UTC m=+18.527980056 I0702 10:10:07.609503 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 10:10:07.609485532 +0000 UTC m=+39.727317124 I0702 10:10:07.609694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:10:07.609767 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:10:07.609755299 +0000 UTC m=+39.727586861 I0702 10:10:07.621114 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 10:10:07.62109221 +0000 UTC m=+39.738923762 I0702 10:10:07.630412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:07.630505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:10:07.630527 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:10:07.630520959 +0000 UTC m=+39.748352531 I0702 10:10:07.934523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:07.944335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-627sj" condition "Approved" to 2026-07-02 10:10:07.944320802 +0000 UTC m=+40.062152364 I0702 10:10:07.980881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-627sj" condition "Ready" to 2026-07-02 10:10:07.98086983 +0000 UTC m=+40.098701392 I0702 10:10:08.015667 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:10:08.015651731 +0000 UTC m=+40.133483303 I0702 10:10:08.037402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:08.037739 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:10:08.037732067 +0000 UTC m=+40.155563619 I0702 10:10:08.064200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:21.374271 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-02 10:12:21.374215784 +0000 UTC m=+173.492047356 I0702 10:12:21.374312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:21.374648 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-02 10:12:21.374590524 +0000 UTC m=+173.492422116 E0702 10:12:21.387642 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:12:21.387716 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-02 10:12:21.387708655 +0000 UTC m=+173.505540217 I0702 10:12:21.387746 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:12:21.393750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:21.393828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:21.393857 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-02 10:12:21.39384969 +0000 UTC m=+173.511681262 E0702 10:12:21.400734 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0702 10:12:21.401068 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:12:21.401123 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 10:12:21.401298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0702 10:12:21.402653 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-02 10:12:21.402636864 +0000 UTC m=+173.520468426 I0702 10:12:21.402754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:21.402910 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 10:12:21.402893862 +0000 UTC m=+173.520725484 I0702 10:12:21.421710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:21.421811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:21.422752 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 10:12:21.421832309 +0000 UTC m=+173.539663891 I0702 10:12:21.630653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6c248" condition "Approved" to 2026-07-02 10:12:21.630631888 +0000 UTC m=+173.748463480 I0702 10:12:21.652793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6c248" condition "Ready" to 2026-07-02 10:12:21.65278114 +0000 UTC m=+173.770612702 I0702 10:12:21.810756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:21.823671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ghw2j" condition "Approved" to 2026-07-02 10:12:21.823654025 +0000 UTC m=+173.941485617 I0702 10:12:21.881434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ghw2j" condition "Ready" to 2026-07-02 10:12:21.8814222 +0000 UTC m=+173.999253752 I0702 10:12:21.908084 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:21.908066193 +0000 UTC m=+174.025897785 I0702 10:12:21.925468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:21.925822 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:21.925815398 +0000 UTC m=+174.043646970 I0702 10:12:21.948761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:26.401598 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:26.401589226 +0000 UTC m=+178.519420778 I0702 10:12:26.419338 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6c248" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:26.41932131 +0000 UTC m=+178.537152892 I0702 10:12:26.453442 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:26.453428764 +0000 UTC m=+178.571260316 I0702 10:12:26.471134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:26.471420 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:26.471413664 +0000 UTC m=+178.589245216 I0702 10:12:26.493500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:03.789802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready" to 2026-07-02 10:15:03.78967736 +0000 UTC m=+335.907508942 I0702 10:15:03.790095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:15:03.790251 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Issuing" to 2026-07-02 10:15:03.790239355 +0000 UTC m=+335.908070947 I0702 10:15:03.816484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:03.816569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready" to 2026-07-02 10:15:03.816558651 +0000 UTC m=+335.934390223 I0702 10:15:04.049841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:04.083567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-r9nbw" condition "Approved" to 2026-07-02 10:15:04.083553034 +0000 UTC m=+336.201384626 I0702 10:15:04.100449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-r9nbw" condition "Ready" to 2026-07-02 10:15:04.10042985 +0000 UTC m=+336.218261412 I0702 10:15:04.127450 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:15:04.127436114 +0000 UTC m=+336.245267676 I0702 10:15:04.153572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:18.725419 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 10:16:18.725402113 +0000 UTC m=+410.843233685 I0702 10:16:18.725788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:16:18.725862 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 10:16:18.725850104 +0000 UTC m=+410.843681686 E0702 10:16:18.936915 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:16:18.936994 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 10:16:18.936980322 +0000 UTC m=+411.054811904 E0702 10:16:18.937071 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:16:18.941146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:18.941279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:16:18.941314 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 10:16:18.941303496 +0000 UTC m=+411.059135088 E0702 10:16:19.301035 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 10:16:19.301221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:16:19.301279 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:16:19.301362 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 10:16:19.621190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:19.621461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dstxz" condition "Approved" to 2026-07-02 10:16:19.621443851 +0000 UTC m=+411.739275433 I0702 10:16:19.780929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dstxz" condition "Ready" to 2026-07-02 10:16:19.780914416 +0000 UTC m=+411.898745998 I0702 10:16:19.821944 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:19.821925507 +0000 UTC m=+411.939757069 I0702 10:16:19.839425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:19.840076 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:19.840028814 +0000 UTC m=+411.957860406 I0702 10:16:19.859579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:24.302028 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:24.302013001 +0000 UTC m=+416.419844543 I0702 10:17:08.075806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:17:08.075835 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 10:17:08.07582906 +0000 UTC m=+460.193660602 I0702 10:17:08.076556 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 10:17:08.076551339 +0000 UTC m=+460.194382891 I0702 10:17:08.076731 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 10:17:08.076728274 +0000 UTC m=+460.194559816 I0702 10:17:08.076734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:17:08.076912 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 10:17:08.076909188 +0000 UTC m=+460.194740740 I0702 10:17:08.077070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:17:08.077122 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 10:17:08.077111954 +0000 UTC m=+460.194943536 I0702 10:17:08.077951 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:17:08.077232837 +0000 UTC m=+460.195064419 I0702 10:17:08.121919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.122028 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 10:17:08.122016418 +0000 UTC m=+460.239847970 I0702 10:17:08.127343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.127547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:17:08.127606 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:17:08.127600066 +0000 UTC m=+460.245431618 I0702 10:17:08.130437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.130549 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 10:17:08.130541393 +0000 UTC m=+460.248372955 I0702 10:17:08.334383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.372376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbd6g" condition "Approved" to 2026-07-02 10:17:08.372348779 +0000 UTC m=+460.490180341 I0702 10:17:08.399387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbd6g" condition "Ready" to 2026-07-02 10:17:08.399367852 +0000 UTC m=+460.517199434 I0702 10:17:08.436117 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:17:08.436105991 +0000 UTC m=+460.553937543 I0702 10:17:08.469852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49rll" condition "Approved" to 2026-07-02 10:17:08.469835981 +0000 UTC m=+460.587667543 I0702 10:17:08.477722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.490468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49rll" condition "Ready" to 2026-07-02 10:17:08.490457294 +0000 UTC m=+460.608288846 I0702 10:17:08.518621 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:17:08.518598215 +0000 UTC m=+460.636429777 I0702 10:17:08.548138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:08.609219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0702 10:17:08.754975 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-xml69\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0702 10:17:08.962360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kznpj" condition "Approved" to 2026-07-02 10:17:08.962344477 +0000 UTC m=+461.080176039 I0702 10:17:09.168468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kznpj" condition "Ready" to 2026-07-02 10:17:09.168450172 +0000 UTC m=+461.286281724 I0702 10:17:09.560878 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:17:09.560856289 +0000 UTC m=+461.678687861 I0702 10:17:09.727184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:09.728695 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:17:09.728672674 +0000 UTC m=+461.846504236 I0702 10:17:09.856863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:22.074570 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" condition "Ready" to 2026-07-02 10:17:22.07455802 +0000 UTC m=+474.192389582 I0702 10:17:22.074779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:17:22.074893 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" condition "Issuing" to 2026-07-02 10:17:22.074882149 +0000 UTC m=+474.192713701 I0702 10:17:22.096178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wztkm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:22.096324 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" condition "Ready" to 2026-07-02 10:17:22.096315453 +0000 UTC m=+474.214147015 I0702 10:17:22.243818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wztkm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:17:22.279554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wztkm-mdv24" condition "Approved" to 2026-07-02 10:17:22.279493554 +0000 UTC m=+474.397325216 I0702 10:17:22.306282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wztkm-mdv24" condition "Ready" to 2026-07-02 10:17:22.30627181 +0000 UTC m=+474.424103372 I0702 10:17:22.370515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:17:22.370490423 +0000 UTC m=+474.488321985 I0702 10:17:22.440250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wztkm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wztkm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:18:01.029682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:18:01.029788 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 10:18:01.029775032 +0000 UTC m=+513.147606604 I0702 10:18:01.029794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:18:01.029781702 +0000 UTC m=+513.147613274 I0702 10:18:01.068522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:18:01.068666 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:18:01.068655661 +0000 UTC m=+513.186487233 I0702 10:18:01.189468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:18:01.229238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kxx6n" condition "Approved" to 2026-07-02 10:18:01.229208213 +0000 UTC m=+513.347039785 I0702 10:18:01.253482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kxx6n" condition "Ready" to 2026-07-02 10:18:01.253464669 +0000 UTC m=+513.371296221 I0702 10:18:01.291200 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:18:01.291171826 +0000 UTC m=+513.409003388 I0702 10:18:01.317207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:18:01.317571 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:18:01.317559586 +0000 UTC m=+513.435391138 I0702 10:18:01.345676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:21:35.336224 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 10:21:35.3361884 +0000 UTC m=+727.454019962 I0702 10:21:35.336631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:21:35.336795 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 10:21:35.336730285 +0000 UTC m=+727.454561877 I0702 10:21:35.360191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:21:35.360275 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 10:21:35.360265592 +0000 UTC m=+727.478097154 I0702 10:21:35.490573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:21:35.527023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v8xkq" condition "Approved" to 2026-07-02 10:21:35.527014917 +0000 UTC m=+727.644846469 I0702 10:21:35.548305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v8xkq" condition "Ready" to 2026-07-02 10:21:35.548292326 +0000 UTC m=+727.666123888 I0702 10:21:35.586887 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:21:35.586860198 +0000 UTC m=+727.704691790 I0702 10:21:35.615027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:21:35.616167 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:21:35.616155347 +0000 UTC m=+727.733986909 I0702 10:21:35.637560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:24:09.699079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:24:09.699214 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-02 10:24:09.699203176 +0000 UTC m=+881.817034768 I0702 10:24:09.699385 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-02 10:24:09.699297908 +0000 UTC m=+881.817129500 I0702 10:24:09.720995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:24:09.721140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:24:09.721191 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-02 10:24:09.721177771 +0000 UTC m=+881.839009333 I0702 10:24:09.929535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f6s8n" condition "Approved" to 2026-07-02 10:24:09.929524161 +0000 UTC m=+882.047355723 I0702 10:24:09.967688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f6s8n" condition "Ready" to 2026-07-02 10:24:09.967670279 +0000 UTC m=+882.085501841 I0702 10:24:10.024359 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:24:10.024345191 +0000 UTC m=+882.142176743 I0702 10:24:10.052110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:24:10.052608 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:24:10.05259909 +0000 UTC m=+882.170430652 I0702 10:24:10.084404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:25:30.117544 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-02 10:25:30.117522673 +0000 UTC m=+962.235354265 I0702 10:25:30.118040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:25:30.118108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-02 10:25:30.118101968 +0000 UTC m=+962.235933550 I0702 10:25:30.142944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:25:30.143038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:25:30.143063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-02 10:25:30.143053181 +0000 UTC m=+962.260884763 I0702 10:25:30.342814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:25:30.352375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-947wf" condition "Approved" to 2026-07-02 10:25:30.352360667 +0000 UTC m=+962.470192239 I0702 10:25:30.372201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-947wf" condition "Ready" to 2026-07-02 10:25:30.372189055 +0000 UTC m=+962.490020617 I0702 10:25:30.419182 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:25:30.419160394 +0000 UTC m=+962.536991986 I0702 10:25:30.446897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:25:30.499503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:28:57.019959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:28:57.019990 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-02 10:28:57.019987367 +0000 UTC m=+1169.137818919 I0702 10:28:57.019937 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-02 10:28:57.019840983 +0000 UTC m=+1169.137672535 I0702 10:28:57.037382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:28:57.037671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:28:57.037699 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-02 10:28:57.037691784 +0000 UTC m=+1169.155523346 I0702 10:28:57.273828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zksxn" condition "Approved" to 2026-07-02 10:28:57.27379987 +0000 UTC m=+1169.391631432 I0702 10:28:57.302159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zksxn" condition "Ready" to 2026-07-02 10:28:57.302140923 +0000 UTC m=+1169.419972485 I0702 10:28:57.337735 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:28:57.33771269 +0000 UTC m=+1169.455544262 I0702 10:28:57.358948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:28:57.359517 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:28:57.359505674 +0000 UTC m=+1169.477337236 I0702 10:28:57.383141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:28:57.385095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:36:52.986323 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-02 10:36:52.98597491 +0000 UTC m=+1645.103806472 I0702 10:36:52.986514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:36:52.986618 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-02 10:36:52.986606826 +0000 UTC m=+1645.104438408 I0702 10:36:53.024156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:36:53.024314 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-02 10:36:53.024299636 +0000 UTC m=+1645.142131218 I0702 10:36:53.470256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:36:53.510823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-nq7wx" condition "Approved" to 2026-07-02 10:36:53.510812135 +0000 UTC m=+1645.628643707 I0702 10:36:53.533171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-nq7wx" condition "Ready" to 2026-07-02 10:36:53.533154825 +0000 UTC m=+1645.650986407 I0702 10:36:53.574036 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:36:53.574015046 +0000 UTC m=+1645.691846638 I0702 10:36:53.608059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:38.570374 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-02 10:38:38.570341903 +0000 UTC m=+1750.688173485 I0702 10:38:38.570524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:38:38.570605 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-02 10:38:38.570597379 +0000 UTC m=+1750.688428941 I0702 10:38:38.592234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:38.592407 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-02 10:38:38.592393935 +0000 UTC m=+1750.710225497 I0702 10:38:38.723696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:39.087285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b6qdf" condition "Approved" to 2026-07-02 10:38:39.087270332 +0000 UTC m=+1751.205101884 I0702 10:38:39.274362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b6qdf" condition "Ready" to 2026-07-02 10:38:39.274340621 +0000 UTC m=+1751.392172213 I0702 10:38:39.310208 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:38:39.310193803 +0000 UTC m=+1751.428025355 I0702 10:38:39.339247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:39.339784 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:38:39.339775562 +0000 UTC m=+1751.457607124 I0702 10:38:39.352717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:39.380333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:38:39.381019 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:38:39.381003243 +0000 UTC m=+1751.498834835 I0702 10:39:53.370299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:39:53.370366 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-02 10:39:53.37035866 +0000 UTC m=+1825.488190222 I0702 10:39:53.370446 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-02 10:39:53.370427732 +0000 UTC m=+1825.488259294 I0702 10:39:53.394271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:53.394437 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-02 10:39:53.394420588 +0000 UTC m=+1825.512252180 I0702 10:39:53.420323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:53.451408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-99sxp" condition "Approved" to 2026-07-02 10:39:53.451377757 +0000 UTC m=+1825.569209349 I0702 10:39:53.474953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-99sxp" condition "Ready" to 2026-07-02 10:39:53.474926071 +0000 UTC m=+1825.592757633 I0702 10:39:53.504290 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:39:53.504270479 +0000 UTC m=+1825.622102041 I0702 10:39:53.528812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:54.222192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:39:54.222242 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-02 10:39:54.222229148 +0000 UTC m=+1826.340060730 I0702 10:39:54.222332 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-02 10:39:54.222192027 +0000 UTC m=+1826.340023589 I0702 10:39:54.243423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:54.243720 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-02 10:39:54.243702467 +0000 UTC m=+1826.361534059 I0702 10:39:54.267230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:54.267538 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-02 10:39:54.267526739 +0000 UTC m=+1826.385358291 I0702 10:39:54.288660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8kf57" condition "Approved" to 2026-07-02 10:39:54.288640908 +0000 UTC m=+1826.406472490 I0702 10:39:54.313713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8kf57" condition "Ready" to 2026-07-02 10:39:54.313692132 +0000 UTC m=+1826.431523694 I0702 10:39:54.357032 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:39:54.357014361 +0000 UTC m=+1826.474845953 I0702 10:39:54.385493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:54.385815 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:39:54.385804754 +0000 UTC m=+1826.503636316 I0702 10:39:54.428937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:39:55.151951 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-02 10:39:55.151933329 +0000 UTC m=+1827.269764881 I0702 10:39:55.926933 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-02 10:39:55.92691989 +0000 UTC m=+1828.044751452 I0702 10:40:45.248224 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-02 10:40:45.248197192 +0000 UTC m=+1877.366028744 I0702 10:40:45.248932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:40:45.249014 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-02 10:40:45.249001693 +0000 UTC m=+1877.366833245 I0702 10:40:45.340447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:40:45.340576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:40:45.340599 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-02 10:40:45.340592881 +0000 UTC m=+1877.458424433 I0702 10:40:46.886614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-k544k" condition "Approved" to 2026-07-02 10:40:46.886592256 +0000 UTC m=+1879.004423818 I0702 10:40:46.921958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-k544k" condition "Ready" to 2026-07-02 10:40:46.921932352 +0000 UTC m=+1879.039763904 I0702 10:40:46.993414 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:40:46.993388277 +0000 UTC m=+1879.111219859 I0702 10:40:47.054773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:40:47.055574 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:40:47.055563394 +0000 UTC m=+1879.173394946 I0702 10:40:47.100986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:40:47.104054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:00.941522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:44:00.941538 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-02 10:44:00.941511755 +0000 UTC m=+2073.059343307 I0702 10:44:00.941598 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-02 10:44:00.941584207 +0000 UTC m=+2073.059415769 I0702 10:44:00.975609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:00.975724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:44:00.975746 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-02 10:44:00.975739674 +0000 UTC m=+2073.093571226 I0702 10:44:01.121544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:01.126506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-h7kv2" condition "Approved" to 2026-07-02 10:44:01.12649061 +0000 UTC m=+2073.244322162 I0702 10:44:01.148922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-h7kv2" condition "Ready" to 2026-07-02 10:44:01.148902412 +0000 UTC m=+2073.266733974 I0702 10:44:01.191771 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:01.191740292 +0000 UTC m=+2073.309571874 I0702 10:44:01.215989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:01.216389 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:01.216382153 +0000 UTC m=+2073.334213705 I0702 10:44:01.293000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:01.293382 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:01.29337215 +0000 UTC m=+2073.411203722 I0702 10:44:01.451649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:02.880827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:44:02.880873 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-02 10:44:02.880859812 +0000 UTC m=+2074.998691384 I0702 10:44:02.880906 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-02 10:44:02.880893442 +0000 UTC m=+2074.998725004 I0702 10:44:02.900022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:02.900123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:44:02.900152 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-02 10:44:02.900142299 +0000 UTC m=+2075.017973851 I0702 10:44:03.659913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-5qp7j" condition "Approved" to 2026-07-02 10:44:03.659898313 +0000 UTC m=+2075.777729885 I0702 10:44:03.688330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-5qp7j" condition "Ready" to 2026-07-02 10:44:03.688317775 +0000 UTC m=+2075.806149327 I0702 10:44:03.724473 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:03.724448596 +0000 UTC m=+2075.842280148 I0702 10:44:03.745911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:03.746270 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:03.746264331 +0000 UTC m=+2075.864095873 I0702 10:44:03.769296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:44:03.769751 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:44:03.769739072 +0000 UTC m=+2075.887570634 I0702 10:47:33.868808 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-02 10:47:33.868750695 +0000 UTC m=+2285.986582257 I0702 10:47:33.869401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:47:33.869457 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-02 10:47:33.869451454 +0000 UTC m=+2285.987283016 I0702 10:47:33.891552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:47:33.891827 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-02 10:47:33.891814985 +0000 UTC m=+2286.009646547 I0702 10:47:34.058672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:47:34.098052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pfjww" condition "Approved" to 2026-07-02 10:47:34.098040151 +0000 UTC m=+2286.215871713 I0702 10:47:34.120361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pfjww" condition "Ready" to 2026-07-02 10:47:34.120341289 +0000 UTC m=+2286.238172881 I0702 10:47:34.161638 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:47:34.161613427 +0000 UTC m=+2286.279444989 I0702 10:47:34.180722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:47:34.181176 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:47:34.181165912 +0000 UTC m=+2286.298997464 I0702 10:47:34.209415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:37.067144 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-api" condition "Ready" to 2026-07-02 10:48:37.067127872 +0000 UTC m=+2349.184959434 I0702 10:48:37.067632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:48:37.067665 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-api" condition "Issuing" to 2026-07-02 10:48:37.067649426 +0000 UTC m=+2349.185480988 I0702 10:48:37.092010 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Ready" to 2026-07-02 10:48:37.09199446 +0000 UTC m=+2349.209826012 I0702 10:48:37.092262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:48:37.092316 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Issuing" to 2026-07-02 10:48:37.092298918 +0000 UTC m=+2349.210130500 I0702 10:48:37.115638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:37.115730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:48:37.115754 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-api" condition "Issuing" to 2026-07-02 10:48:37.115745778 +0000 UTC m=+2349.233577340 I0702 10:48:37.142469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:37.142572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vcb66-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:48:37.142596 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Issuing" to 2026-07-02 10:48:37.142587318 +0000 UTC m=+2349.260418890 I0702 10:48:37.759263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vcb66-api-xc9hx" condition "Approved" to 2026-07-02 10:48:37.75923514 +0000 UTC m=+2349.877066702 I0702 10:48:37.780103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vcb66-api-xc9hx" condition "Ready" to 2026-07-02 10:48:37.78008939 +0000 UTC m=+2349.897920962 I0702 10:48:37.816381 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vcb66-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:48:37.816362534 +0000 UTC m=+2349.934194086 I0702 10:48:37.840534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-vcb66-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:37.908890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vcb66-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:37.921834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vcb66-vnc-pvxp5" condition "Approved" to 2026-07-02 10:48:37.921809783 +0000 UTC m=+2350.039641335 I0702 10:48:37.945292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vcb66-vnc-pvxp5" condition "Ready" to 2026-07-02 10:48:37.945276124 +0000 UTC m=+2350.063107676 I0702 10:48:37.983947 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:48:37.983930191 +0000 UTC m=+2350.101761763 I0702 10:48:38.005906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vcb66-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:38.006683 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:48:38.006669711 +0000 UTC m=+2350.124501283 I0702 10:48:38.029404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vcb66-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:48:38.030066 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vcb66-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:48:38.030053419 +0000 UTC m=+2350.147884981 I0702 10:48:38.034254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vcb66-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vcb66-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:50.416533 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-02 10:52:50.416485249 +0000 UTC m=+2602.534316841 I0702 10:52:50.417345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:52:50.417450 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-02 10:52:50.417440745 +0000 UTC m=+2602.535272297 I0702 10:52:50.561619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:50.562005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:52:50.562101 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-02 10:52:50.56209225 +0000 UTC m=+2602.679923802 I0702 10:52:50.940540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-krk5d" condition "Approved" to 2026-07-02 10:52:50.940523461 +0000 UTC m=+2603.058355013 I0702 10:52:50.960929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-krk5d" condition "Ready" to 2026-07-02 10:52:50.960910746 +0000 UTC m=+2603.078742308 I0702 10:52:50.994956 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:52:50.994939249 +0000 UTC m=+2603.112770801 I0702 10:52:51.031722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:51.100983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:52.346863 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-02 10:52:52.346838895 +0000 UTC m=+2604.464670497 I0702 10:52:52.346928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:52:52.347178 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-02 10:52:52.347165014 +0000 UTC m=+2604.464996566 I0702 10:52:52.367375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:52.367550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:52:52.367613 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-02 10:52:52.36760492 +0000 UTC m=+2604.485436472 I0702 10:52:52.641206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:52.651803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zm59s" condition "Approved" to 2026-07-02 10:52:52.651747017 +0000 UTC m=+2604.769578579 I0702 10:52:52.680606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zm59s" condition "Ready" to 2026-07-02 10:52:52.680581973 +0000 UTC m=+2604.798413566 I0702 10:52:52.722965 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:52:52.722940446 +0000 UTC m=+2604.840772008 I0702 10:52:52.744234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:52:52.745089 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:52:52.745072506 +0000 UTC m=+2604.862904188 I0702 10:52:52.770197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:19.741414 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-02 10:55:19.741394212 +0000 UTC m=+2751.859225794 I0702 10:55:19.741852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:19.742006 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-02 10:55:19.741992588 +0000 UTC m=+2751.859824160 E0702 10:55:19.757216 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:19.757346 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-02 10:55:19.757337989 +0000 UTC m=+2751.875169541 I0702 10:55:19.757369 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:19.758596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:19.758719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:19.758747 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-02 10:55:19.758740176 +0000 UTC m=+2751.876571748 E0702 10:55:19.770369 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0702 10:55:19.770515 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:19.770554 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 10:55:19.770600 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0702 10:55:19.803480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:19.807919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-85dww" condition "Approved" to 2026-07-02 10:55:19.807903507 +0000 UTC m=+2751.925735059 I0702 10:55:19.830784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-85dww" condition "Ready" to 2026-07-02 10:55:19.830765136 +0000 UTC m=+2751.948596718 I0702 10:55:19.874469 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:19.874451674 +0000 UTC m=+2751.992283236 I0702 10:55:19.906275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:19.906997 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:19.906989737 +0000 UTC m=+2752.024821289 I0702 10:55:19.926420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:20.641350 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-02 10:55:20.641335258 +0000 UTC m=+2752.759166810 I0702 10:55:20.641447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:20.641513 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-02 10:55:20.641499732 +0000 UTC m=+2752.759331324 E0702 10:55:20.654722 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:20.654763 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-02 10:55:20.654755789 +0000 UTC m=+2752.772587341 I0702 10:55:20.654807 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:20.661048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:20.661161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:20.661182 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-02 10:55:20.661173838 +0000 UTC m=+2752.779005400 E0702 10:55:20.664738 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0702 10:55:20.664906 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 10:55:20.664950 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 10:55:20.665036 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0702 10:55:20.722856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:20.726605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-m7ln5" condition "Approved" to 2026-07-02 10:55:20.726591495 +0000 UTC m=+2752.844423067 I0702 10:55:20.749771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-m7ln5" condition "Ready" to 2026-07-02 10:55:20.749750733 +0000 UTC m=+2752.867582335 I0702 10:55:20.778165 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:20.778149428 +0000 UTC m=+2752.895980980 I0702 10:55:20.796393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:20.856277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:21.468472 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-02 10:55:21.468456193 +0000 UTC m=+2753.586287755 I0702 10:55:21.468999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:21.469045 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-02 10:55:21.469036748 +0000 UTC m=+2753.586868310 I0702 10:55:21.487812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:21.487915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:55:21.487932 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-02 10:55:21.487927544 +0000 UTC m=+2753.605759096 I0702 10:55:21.556458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-rhcsw" condition "Approved" to 2026-07-02 10:55:21.556444352 +0000 UTC m=+2753.674275924 I0702 10:55:21.572958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-rhcsw" condition "Ready" to 2026-07-02 10:55:21.572944115 +0000 UTC m=+2753.690775687 I0702 10:55:24.770827 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:24.770804573 +0000 UTC m=+2756.888636125 I0702 10:55:24.784290 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-rhcsw" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:24.784265996 +0000 UTC m=+2756.902097548 I0702 10:55:24.815029 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:24.815014683 +0000 UTC m=+2756.932846245 I0702 10:55:24.837823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:24.838035 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:24.838028697 +0000 UTC m=+2756.955860249 I0702 10:55:24.857896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:55:25.665366 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:55:25.665347557 +0000 UTC m=+2757.783179109 I0702 10:57:57.719727 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-02 10:57:57.719675083 +0000 UTC m=+2909.837506675 I0702 10:57:57.720038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:57:57.720118 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-02 10:57:57.720107405 +0000 UTC m=+2909.837938987 I0702 10:57:57.742881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:57:57.743021 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-02 10:57:57.743010166 +0000 UTC m=+2909.860841728 I0702 10:57:57.880598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:57:57.924401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-l2z2c" condition "Approved" to 2026-07-02 10:57:57.924362675 +0000 UTC m=+2910.042194237 I0702 10:57:57.953849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-l2z2c" condition "Ready" to 2026-07-02 10:57:57.953835908 +0000 UTC m=+2910.071667480 I0702 10:57:57.989161 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:57:57.989145094 +0000 UTC m=+2910.106976656 I0702 10:57:58.021112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:47.788577 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-02 10:58:47.788558667 +0000 UTC m=+2959.906390219 I0702 10:58:47.810661 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-02 10:58:47.810640706 +0000 UTC m=+2959.928472268 I0702 10:58:47.810755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:47.810973 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-02 10:58:47.810956704 +0000 UTC m=+2959.928788286 I0702 10:58:47.833618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:47.833709 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-02 10:58:47.833701521 +0000 UTC m=+2959.951533083 E0702 10:58:47.845904 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0702 10:58:47.917021 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-02 10:58:47.916915255 +0000 UTC m=+2960.034746857 I0702 10:58:47.939831 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-02 10:58:47.939812336 +0000 UTC m=+2960.057643898 I0702 10:58:47.940253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:47.940290 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-02 10:58:47.940285319 +0000 UTC m=+2960.058116881 E0702 10:58:47.943171 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0702 10:58:47.961083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:47.961225 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-02 10:58:47.961214997 +0000 UTC m=+2960.079046559 I0702 10:58:48.094212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:48.133679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vsq5b" condition "Approved" to 2026-07-02 10:58:48.133661973 +0000 UTC m=+2960.251493605 I0702 10:58:48.165841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vsq5b" condition "Ready" to 2026-07-02 10:58:48.165828217 +0000 UTC m=+2960.283659769 I0702 10:58:48.211855 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:48.211839754 +0000 UTC m=+2960.329671316 I0702 10:58:48.232398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:48.320719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:48.898549 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-02 10:58:48.898528994 +0000 UTC m=+2961.016360536 I0702 10:58:48.932572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:48.932608 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-02 10:58:48.932599738 +0000 UTC m=+2961.050431300 I0702 10:58:48.932643 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-02 10:58:48.932617969 +0000 UTC m=+2961.050449531 I0702 10:58:48.951875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:48.952496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:48.952524 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-02 10:58:48.952518391 +0000 UTC m=+2961.070349933 I0702 10:58:49.313119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gfhjk" condition "Approved" to 2026-07-02 10:58:49.313104133 +0000 UTC m=+2961.430935695 I0702 10:58:49.347596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gfhjk" condition "Ready" to 2026-07-02 10:58:49.347576018 +0000 UTC m=+2961.465407570 I0702 10:58:49.412220 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:49.412207434 +0000 UTC m=+2961.530038986 I0702 10:58:49.463984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:49.464616 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:49.464600479 +0000 UTC m=+2961.582432071 I0702 10:58:49.472432 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-02 10:58:49.472418244 +0000 UTC m=+2961.590249796 I0702 10:58:49.504197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:49.505130 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-02 10:58:49.505075632 +0000 UTC m=+2961.622907224 I0702 10:58:49.506441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:49.506528 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-02 10:58:49.506473289 +0000 UTC m=+2961.624304871 I0702 10:58:49.507562 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:49.507552346 +0000 UTC m=+2961.625383898 I0702 10:58:49.533057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:49.533178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:49.533216 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-02 10:58:49.53320646 +0000 UTC m=+2961.651038052 I0702 10:58:49.754166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:49.784142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-8gs45" condition "Approved" to 2026-07-02 10:58:49.784127624 +0000 UTC m=+2961.901959196 I0702 10:58:49.805798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-8gs45" condition "Ready" to 2026-07-02 10:58:49.805784912 +0000 UTC m=+2961.923616474 I0702 10:58:49.861242 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:49.861228297 +0000 UTC m=+2961.979059869 I0702 10:58:49.886693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:49.887036 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:49.887028855 +0000 UTC m=+2962.004860397 I0702 10:58:49.912149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:50.058021 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-02 10:58:50.058006151 +0000 UTC m=+2962.175837713 I0702 10:58:50.098494 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-02 10:58:50.098478833 +0000 UTC m=+2962.216310395 I0702 10:58:50.098794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:58:50.098823 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-02 10:58:50.098814373 +0000 UTC m=+2962.216645925 I0702 10:58:50.143758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:50.143829 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-02 10:58:50.143822013 +0000 UTC m=+2962.261653565 I0702 10:58:50.379997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:58:50.429366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-mh62d" condition "Approved" to 2026-07-02 10:58:50.429348246 +0000 UTC m=+2962.547179788 I0702 10:58:50.514847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-mh62d" condition "Ready" to 2026-07-02 10:58:50.514833869 +0000 UTC m=+2962.632665431 I0702 10:58:50.954294 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:58:50.954279772 +0000 UTC m=+2963.072111324 I0702 10:58:51.104309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:24.230300 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-02 11:03:24.230285618 +0000 UTC m=+3236.348117200 I0702 11:03:24.231125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:03:24.231187 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-02 11:03:24.231180443 +0000 UTC m=+3236.349012025 I0702 11:03:24.254989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:24.255116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:03:24.255144 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-02 11:03:24.255137969 +0000 UTC m=+3236.372969531 I0702 11:03:24.594087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:24.607201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-q288z" condition "Approved" to 2026-07-02 11:03:24.607184891 +0000 UTC m=+3236.725016453 I0702 11:03:24.628355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-q288z" condition "Ready" to 2026-07-02 11:03:24.628340634 +0000 UTC m=+3236.746172196 I0702 11:03:24.669974 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:03:24.669946972 +0000 UTC m=+3236.787778534 I0702 11:03:24.701660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:27.561521 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-02 11:03:27.561496598 +0000 UTC m=+3239.679328160 I0702 11:03:27.562664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:03:27.562715 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-02 11:03:27.562703459 +0000 UTC m=+3239.680535041 I0702 11:03:27.593048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:27.593211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:03:27.593237 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-02 11:03:27.593227989 +0000 UTC m=+3239.711059531 I0702 11:03:27.743348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-q8xv2" condition "Approved" to 2026-07-02 11:03:27.743332526 +0000 UTC m=+3239.861164088 I0702 11:03:27.776787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-q8xv2" condition "Ready" to 2026-07-02 11:03:27.776769221 +0000 UTC m=+3239.894600783 I0702 11:03:27.816935 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:03:27.816919841 +0000 UTC m=+3239.934751403 I0702 11:03:27.848063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:27.848770 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:03:27.848752914 +0000 UTC m=+3239.966584466 I0702 11:03:27.869991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:03:27.870556 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:03:27.870541044 +0000 UTC m=+3239.988372616 I0702 11:08:48.542011 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-02 11:08:48.54199141 +0000 UTC m=+3560.659823002 I0702 11:08:48.542202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:08:48.542264 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-02 11:08:48.542249957 +0000 UTC m=+3560.660081549 I0702 11:08:48.561657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:08:48.561783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:08:48.561813 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-02 11:08:48.561804948 +0000 UTC m=+3560.679636510 I0702 11:08:49.002378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-4jldc" condition "Approved" to 2026-07-02 11:08:49.002370326 +0000 UTC m=+3561.120201888 I0702 11:08:49.026958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-4jldc" condition "Ready" to 2026-07-02 11:08:49.026948768 +0000 UTC m=+3561.144780330 I0702 11:08:49.060991 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:08:49.060973198 +0000 UTC m=+3561.178804790 I0702 11:08:49.090688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:09:28.674798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 11:09:28.674863 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 11:09:28.674856374 +0000 UTC m=+3600.792687936 I0702 11:09:28.675053 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 11:09:28.675037918 +0000 UTC m=+3600.792869470 I0702 11:09:28.695501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:09:28.695818 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 11:09:28.695803221 +0000 UTC m=+3600.813634813 I0702 11:09:28.978135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:09:29.009806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-d59cn" condition "Approved" to 2026-07-02 11:09:29.009783841 +0000 UTC m=+3601.127615393 I0702 11:09:29.029161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-d59cn" condition "Ready" to 2026-07-02 11:09:29.029147226 +0000 UTC m=+3601.146978798 I0702 11:09:29.063689 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:09:29.063666368 +0000 UTC m=+3601.181497960 I0702 11:09:29.094225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 11:09:29.094764 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 11:09:29.09475298 +0000 UTC m=+3601.212584552 I0702 11:09:29.123117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"