I0915 11:27:42.064425 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0915 11:27:42.064582 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0915 11:27:42.064694 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0915 11:27:42.072752 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0915 11:27:42.073638 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0915 11:27:42.073741 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0915 11:27:42.073754 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0915 11:27:42.079143 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0915 11:27:42.097302 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0915 11:27:42.097599 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0915 11:27:42.103023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0915 11:27:42.107961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0915 11:27:42.115642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0915 11:27:42.120931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0915 11:27:42.125706 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0915 11:27:42.125862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0915 11:27:42.130894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0915 11:27:42.135878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0915 11:27:42.139879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0915 11:27:42.143881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0915 11:27:42.150468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0915 11:27:42.154734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0915 11:27:42.158442 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0915 11:27:42.158488 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0915 11:27:42.158498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0915 11:27:42.158507 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0915 11:27:42.162422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0915 11:27:42.167163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0915 11:27:42.171125 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0915 11:27:42.171167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0915 11:27:42.175534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0915 11:27:42.179434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0915 11:27:42.184557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0915 11:27:42.187907 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.189908 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.190699 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.190920 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.191800 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.193086 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.193165 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.193580 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.193972 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:42.301725 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:27:53.468340 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-15 11:27:53.468324482 +0000 UTC m=+11.447024789 I0915 11:27:54.235493 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 11:27:54.235476929 +0000 UTC m=+12.214177236 I0915 11:27:54.236077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:27:54.236213 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:27:54.236201622 +0000 UTC m=+12.214901929 E0915 11:27:54.252205 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:27:54.252370 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-15 11:27:54.252352695 +0000 UTC m=+12.231053012 E0915 11:27:54.252418 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:27:54.256057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:54.256179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:27:54.256209 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:27:54.256198403 +0000 UTC m=+12.234898710 E0915 11:27:54.270517 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0915 11:27:54.270663 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:27:54.270714 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:27:54.270785 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0915 11:27:54.309947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:54.310016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-csn2s" condition "Approved" to 2026-09-15 11:27:54.309973708 +0000 UTC m=+12.288674015 I0915 11:27:54.332582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-csn2s" condition "Ready" to 2026-09-15 11:27:54.332561409 +0000 UTC m=+12.311261716 I0915 11:27:54.362677 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:27:54.362656051 +0000 UTC m=+12.341356368 I0915 11:27:54.383390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:54.428153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:59.271202 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:27:59.271180961 +0000 UTC m=+17.249881278 I0915 11:28:20.002588 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 11:28:20.002570429 +0000 UTC m=+37.981270726 I0915 11:28:20.002591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:20.002685 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:28:20.002679772 +0000 UTC m=+37.981380059 I0915 11:28:20.017391 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-15 11:28:20.01737082 +0000 UTC m=+37.996071117 I0915 11:28:20.041901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:20.042011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:20.042049 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:28:20.042040331 +0000 UTC m=+38.020740618 I0915 11:28:20.463586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jxmh8" condition "Approved" to 2026-09-15 11:28:20.463573182 +0000 UTC m=+38.442273469 I0915 11:28:20.502051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jxmh8" condition "Ready" to 2026-09-15 11:28:20.502034855 +0000 UTC m=+38.480735172 I0915 11:28:20.542728 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:20.542710504 +0000 UTC m=+38.521410811 I0915 11:28:20.568817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:33.766571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-174.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:33.766621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-174.nip.io-tls" condition "Issuing" to 2026-09-15 11:33:33.766611994 +0000 UTC m=+351.745312281 I0915 11:33:33.766681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-174.nip.io-tls" condition "Ready" to 2026-09-15 11:33:33.766652325 +0000 UTC m=+351.745352642 I0915 11:33:33.784853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:33.784942 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-174.nip.io-tls" condition "Ready" to 2026-09-15 11:33:33.784931444 +0000 UTC m=+351.763631751 I0915 11:33:34.039834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:34.067951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-174.nip.io-tls-wr8gf" condition "Approved" to 2026-09-15 11:33:34.067937855 +0000 UTC m=+352.046638132 I0915 11:33:34.095820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-174.nip.io-tls-wr8gf" condition "Ready" to 2026-09-15 11:33:34.095810807 +0000 UTC m=+352.074511094 I0915 11:33:34.120075 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-174.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:34.120063548 +0000 UTC m=+352.098763825 I0915 11:33:34.137527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:46.611269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:34:46.611382 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 11:34:46.611355917 +0000 UTC m=+424.590056234 I0915 11:34:46.611415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:34:46.611402119 +0000 UTC m=+424.590102426 E0915 11:34:46.625914 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:34:46.625980 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-15 11:34:46.625968963 +0000 UTC m=+424.604669270 E0915 11:34:46.627746 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:34:46.631006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:46.631151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:34:46.631214 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:34:46.631203314 +0000 UTC m=+424.609903621 E0915 11:34:46.640123 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0915 11:34:46.640728 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:34:46.640904 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:34:46.640997 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0915 11:34:46.682899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qrgt8" condition "Approved" to 2026-09-15 11:34:46.682878283 +0000 UTC m=+424.661578570 I0915 11:34:46.684285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:46.699211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qrgt8" condition "Ready" to 2026-09-15 11:34:46.699194272 +0000 UTC m=+424.677894589 I0915 11:34:46.725195 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:34:46.725128305 +0000 UTC m=+424.703828582 I0915 11:34:46.747587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:46.747933 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:34:46.747924901 +0000 UTC m=+424.726625188 I0915 11:34:46.761869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:46.762282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:34:46.762268721 +0000 UTC m=+424.740968998 I0915 11:34:46.763641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:34:51.641488 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:34:51.641473023 +0000 UTC m=+429.620173310 I0915 11:35:34.929392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:34.929459 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 11:35:34.929452148 +0000 UTC m=+472.908152425 I0915 11:35:34.929788 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 11:35:34.929784538 +0000 UTC m=+472.908484815 I0915 11:35:34.936114 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 11:35:34.936090402 +0000 UTC m=+472.914790689 I0915 11:35:34.937043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:34.937128 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 11:35:34.937122714 +0000 UTC m=+472.915823001 I0915 11:35:34.942799 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 11:35:34.942781607 +0000 UTC m=+472.921481914 I0915 11:35:34.943227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:34.944152 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 11:35:34.944134198 +0000 UTC m=+472.922834505 I0915 11:35:34.962381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:34.962447 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 11:35:34.962436657 +0000 UTC m=+472.941136934 I0915 11:35:34.965486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:34.965544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:34.965566 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 11:35:34.965560642 +0000 UTC m=+472.944260919 I0915 11:35:34.970517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:34.970586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:34.970614 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 11:35:34.970606836 +0000 UTC m=+472.949307113 I0915 11:35:35.119766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:35.135824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s6t2z" condition "Approved" to 2026-09-15 11:35:35.135805066 +0000 UTC m=+473.114505343 I0915 11:35:35.160653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s6t2z" condition "Ready" to 2026-09-15 11:35:35.160636906 +0000 UTC m=+473.139337223 I0915 11:35:35.173594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4t64" condition "Approved" to 2026-09-15 11:35:35.173579141 +0000 UTC m=+473.152279418 I0915 11:35:35.195696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vnt68" condition "Approved" to 2026-09-15 11:35:35.195684297 +0000 UTC m=+473.174384584 I0915 11:35:35.206360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4t64" condition "Ready" to 2026-09-15 11:35:35.205202388 +0000 UTC m=+473.183902685 I0915 11:35:35.239094 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:35.239082464 +0000 UTC m=+473.217782761 I0915 11:35:35.269983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vnt68" condition "Ready" to 2026-09-15 11:35:35.269953977 +0000 UTC m=+473.248654254 I0915 11:35:35.459479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:35.459979 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:35.459968226 +0000 UTC m=+473.438668513 I0915 11:35:35.610965 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:35.610948982 +0000 UTC m=+473.589649259 I0915 11:35:35.916933 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:35.916925285 +0000 UTC m=+473.895625552 I0915 11:35:35.957687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:35.957989 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:35.95798384 +0000 UTC m=+473.936684117 I0915 11:35:36.012248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:36.111492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:36.111987 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:36.111975428 +0000 UTC m=+474.090675735 I0915 11:35:36.464343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:36.561955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:43.980222 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" condition "Ready" to 2026-09-15 11:35:43.980199382 +0000 UTC m=+481.958899699 I0915 11:35:43.980245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:43.980306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" condition "Issuing" to 2026-09-15 11:35:43.980291484 +0000 UTC m=+481.958991771 I0915 11:35:43.998427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:43.998560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:35:43.998593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" condition "Issuing" to 2026-09-15 11:35:43.998588394 +0000 UTC m=+481.977288661 I0915 11:35:44.203817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9tsq5-cnsd4" condition "Approved" to 2026-09-15 11:35:44.203801038 +0000 UTC m=+482.182501355 I0915 11:35:44.223433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9tsq5-cnsd4" condition "Ready" to 2026-09-15 11:35:44.223422277 +0000 UTC m=+482.202122564 I0915 11:35:44.266304 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:44.266287787 +0000 UTC m=+482.244988074 I0915 11:35:44.288054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:35:44.288407 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:35:44.288400143 +0000 UTC m=+482.267100430 I0915 11:35:44.315492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9tsq5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:36:05.794522 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 11:36:05.794507882 +0000 UTC m=+503.773208159 I0915 11:36:05.794839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:36:05.794870 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 11:36:05.794863722 +0000 UTC m=+503.773563999 I0915 11:36:05.807876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:36:05.807939 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 11:36:05.807931929 +0000 UTC m=+503.786632206 I0915 11:36:06.125469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:36:06.208077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hsb97" condition "Approved" to 2026-09-15 11:36:06.208066471 +0000 UTC m=+504.186766748 I0915 11:36:06.228986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hsb97" condition "Ready" to 2026-09-15 11:36:06.228972674 +0000 UTC m=+504.207672961 I0915 11:36:06.259209 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:36:06.2591891 +0000 UTC m=+504.237889377 I0915 11:36:06.276363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:36:06.276589 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:36:06.276582747 +0000 UTC m=+504.255283024 I0915 11:36:06.294069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:39:30.392146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:39:30.392190 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 11:39:30.39218081 +0000 UTC m=+708.370881117 I0915 11:39:30.392417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 11:39:30.392405187 +0000 UTC m=+708.371105494 I0915 11:39:30.414830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:39:30.414946 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 11:39:30.414932604 +0000 UTC m=+708.393632921 I0915 11:39:30.562976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:39:30.600709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mw4jm" condition "Approved" to 2026-09-15 11:39:30.600677099 +0000 UTC m=+708.579377376 I0915 11:39:30.622535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mw4jm" condition "Ready" to 2026-09-15 11:39:30.622525224 +0000 UTC m=+708.601225501 I0915 11:39:30.654082 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:39:30.654067157 +0000 UTC m=+708.632767434 I0915 11:39:30.675664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:41:57.563559 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-15 11:41:57.56353882 +0000 UTC m=+855.542239107 I0915 11:41:57.563602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:41:57.563705 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-15 11:41:57.563692435 +0000 UTC m=+855.542392742 I0915 11:41:57.586880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:41:57.587002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:41:57.587034 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-15 11:41:57.587025927 +0000 UTC m=+855.565726214 I0915 11:41:57.914764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zzdfb" condition "Approved" to 2026-09-15 11:41:57.91474072 +0000 UTC m=+855.893441037 I0915 11:41:57.917268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:41:57.937664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zzdfb" condition "Ready" to 2026-09-15 11:41:57.937653779 +0000 UTC m=+855.916354056 I0915 11:41:57.970108 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:41:57.970073228 +0000 UTC m=+855.948773515 I0915 11:41:58.007395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:41:58.062272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:02.832246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:43:02.832294 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-15 11:43:02.832283037 +0000 UTC m=+920.810983344 I0915 11:43:02.832356 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-15 11:43:02.832343158 +0000 UTC m=+920.811043445 I0915 11:43:02.861836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:02.861943 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-15 11:43:02.86193236 +0000 UTC m=+920.840632677 I0915 11:43:02.991680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:03.032789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9gqqn" condition "Approved" to 2026-09-15 11:43:03.032769245 +0000 UTC m=+921.011469562 I0915 11:43:03.055978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9gqqn" condition "Ready" to 2026-09-15 11:43:03.055958791 +0000 UTC m=+921.034659108 I0915 11:43:03.099741 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:43:03.099725836 +0000 UTC m=+921.078426113 I0915 11:43:03.133914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:03.134291 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:43:03.134281658 +0000 UTC m=+921.112981935 I0915 11:43:03.145097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:03.157598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:43:03.158040 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:43:03.158031722 +0000 UTC m=+921.136731999 I0915 11:46:11.122648 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-15 11:46:11.122604642 +0000 UTC m=+1109.101304929 I0915 11:46:11.122809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:46:11.122844 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-15 11:46:11.122840109 +0000 UTC m=+1109.101540386 I0915 11:46:11.145470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:46:11.145587 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-15 11:46:11.145577903 +0000 UTC m=+1109.124278190 I0915 11:46:11.333227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:46:11.360079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-chlf8" condition "Approved" to 2026-09-15 11:46:11.360045876 +0000 UTC m=+1109.338746153 I0915 11:46:11.378488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-chlf8" condition "Ready" to 2026-09-15 11:46:11.378475469 +0000 UTC m=+1109.357175756 I0915 11:46:11.404547 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:46:11.404526513 +0000 UTC m=+1109.383226820 I0915 11:46:11.421716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:46:11.422712 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:46:11.422702938 +0000 UTC m=+1109.401403215 I0915 11:46:11.439787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:52:22.399093 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-15 11:52:22.399030103 +0000 UTC m=+1480.377730410 I0915 11:52:22.399118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:52:22.399303 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-15 11:52:22.399282022 +0000 UTC m=+1480.377982309 I0915 11:52:22.419858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:52:22.419959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:52:22.419980 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-15 11:52:22.419974192 +0000 UTC m=+1480.398674469 I0915 11:52:22.625316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7vxkk" condition "Approved" to 2026-09-15 11:52:22.625302223 +0000 UTC m=+1480.604002520 I0915 11:52:22.645819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7vxkk" condition "Ready" to 2026-09-15 11:52:22.645807679 +0000 UTC m=+1480.624507956 I0915 11:52:22.674398 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:52:22.6743887 +0000 UTC m=+1480.653088967 I0915 11:52:22.697690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:52:22.698170 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:52:22.698164265 +0000 UTC m=+1480.676864542 I0915 11:52:22.721262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:53:51.720116 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-15 11:53:51.720073709 +0000 UTC m=+1569.698774016 I0915 11:53:51.720193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:53:51.720248 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-15 11:53:51.720241414 +0000 UTC m=+1569.698941721 I0915 11:53:51.740786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:53:51.740881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:53:51.740906 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-15 11:53:51.740900574 +0000 UTC m=+1569.719600861 I0915 11:53:51.924917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-c2fmx" condition "Approved" to 2026-09-15 11:53:51.924903814 +0000 UTC m=+1569.903604101 I0915 11:53:51.942925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-c2fmx" condition "Ready" to 2026-09-15 11:53:51.942915422 +0000 UTC m=+1569.921615719 I0915 11:53:51.975685 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:53:51.975668711 +0000 UTC m=+1569.954368998 I0915 11:53:51.996523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:53.367242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:54:53.367260 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-15 11:54:53.367241195 +0000 UTC m=+1631.345941502 I0915 11:54:53.367325 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-15 11:54:53.367308217 +0000 UTC m=+1631.346008534 I0915 11:54:53.390536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:53.390641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:54:53.390665 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-15 11:54:53.390656219 +0000 UTC m=+1631.369356536 I0915 11:54:53.455416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:53.462846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-txvb4" condition "Approved" to 2026-09-15 11:54:53.4628324 +0000 UTC m=+1631.441532717 I0915 11:54:53.487307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-txvb4" condition "Ready" to 2026-09-15 11:54:53.487292775 +0000 UTC m=+1631.465993082 I0915 11:54:53.518231 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:54:53.518204047 +0000 UTC m=+1631.496904364 I0915 11:54:53.544362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:53.544782 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:54:53.544769757 +0000 UTC m=+1631.523470044 I0915 11:54:53.568070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:53.568463 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:54:53.568452989 +0000 UTC m=+1631.547153276 I0915 11:54:54.120422 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-15 11:54:54.120401975 +0000 UTC m=+1632.099102272 I0915 11:54:54.120444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:54:54.120481 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-15 11:54:54.120472117 +0000 UTC m=+1632.099172414 I0915 11:54:54.144433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:54.144579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:54:54.144614 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-15 11:54:54.144602813 +0000 UTC m=+1632.123303130 I0915 11:54:54.196675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:54.207211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mwd74" condition "Approved" to 2026-09-15 11:54:54.207196371 +0000 UTC m=+1632.185896638 I0915 11:54:54.237882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mwd74" condition "Ready" to 2026-09-15 11:54:54.237871086 +0000 UTC m=+1632.216571363 I0915 11:54:54.274938 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:54:54.274913046 +0000 UTC m=+1632.253613323 I0915 11:54:54.297572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:54.297823 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:54:54.297816683 +0000 UTC m=+1632.276516960 I0915 11:54:54.300068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:54.319026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:54:54.869539 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-15 11:54:54.869524191 +0000 UTC m=+1632.848224508 I0915 11:54:55.526783 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-15 11:54:55.526769167 +0000 UTC m=+1633.505469484 I0915 11:55:43.321092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:55:43.321126 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-15 11:55:43.321119399 +0000 UTC m=+1681.299819666 I0915 11:55:43.321446 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-15 11:55:43.321442258 +0000 UTC m=+1681.300142535 I0915 11:55:43.363027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:55:43.363147 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-15 11:55:43.363129569 +0000 UTC m=+1681.341829846 I0915 11:55:45.840850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:55:45.884889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-625bj" condition "Approved" to 2026-09-15 11:55:45.884843091 +0000 UTC m=+1683.863543388 I0915 11:55:45.908278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-625bj" condition "Ready" to 2026-09-15 11:55:45.908267396 +0000 UTC m=+1683.886967673 I0915 11:55:45.939273 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:55:45.939255171 +0000 UTC m=+1683.917955458 I0915 11:55:45.969898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:55:45.970429 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:55:45.97042474 +0000 UTC m=+1683.949125017 I0915 11:55:45.991823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:55:45.992331 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:55:45.992324918 +0000 UTC m=+1683.971025195 I0915 11:58:19.781594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:58:19.781712 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-15 11:58:19.781699895 +0000 UTC m=+1837.760400262 I0915 11:58:19.781878 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-15 11:58:19.78185963 +0000 UTC m=+1837.760559947 I0915 11:58:19.805087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:19.805186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:58:19.805217 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-15 11:58:19.805209501 +0000 UTC m=+1837.783909788 I0915 11:58:20.008051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:20.017596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g252r" condition "Approved" to 2026-09-15 11:58:20.017579179 +0000 UTC m=+1837.996279466 I0915 11:58:20.048319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g252r" condition "Ready" to 2026-09-15 11:58:20.048299506 +0000 UTC m=+1838.026999823 I0915 11:58:20.080965 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:58:20.080948911 +0000 UTC m=+1838.059649198 I0915 11:58:20.110794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:20.172866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:21.153008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:58:21.153063 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-15 11:58:21.153051682 +0000 UTC m=+1839.131751999 I0915 11:58:21.153100 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-15 11:58:21.153075662 +0000 UTC m=+1839.131775979 I0915 11:58:21.178320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:21.178928 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-15 11:58:21.17891959 +0000 UTC m=+1839.157619877 I0915 11:58:21.312890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:21.345117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8xn86" condition "Approved" to 2026-09-15 11:58:21.345103299 +0000 UTC m=+1839.323803576 I0915 11:58:21.363376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8xn86" condition "Ready" to 2026-09-15 11:58:21.363367706 +0000 UTC m=+1839.342067983 I0915 11:58:21.399158 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:58:21.399090116 +0000 UTC m=+1839.377790423 I0915 11:58:21.422503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:58:21.423119 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:58:21.423104858 +0000 UTC m=+1839.401805175 I0915 11:58:21.454704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:01:32.955745 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-15 12:01:32.955683903 +0000 UTC m=+2030.934384210 I0915 12:01:32.955773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:01:32.955873 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-15 12:01:32.955865629 +0000 UTC m=+2030.934565916 I0915 12:01:32.975779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:01:32.975910 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-15 12:01:32.975901091 +0000 UTC m=+2030.954601378 I0915 12:01:33.217626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:01:33.258983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-46xn8" condition "Approved" to 2026-09-15 12:01:33.258970374 +0000 UTC m=+2031.237670661 I0915 12:01:33.287240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-46xn8" condition "Ready" to 2026-09-15 12:01:33.287228996 +0000 UTC m=+2031.265929283 I0915 12:01:33.316956 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:01:33.316941552 +0000 UTC m=+2031.295641839 I0915 12:01:33.340905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:01:33.341348 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:01:33.341339146 +0000 UTC m=+2031.320039453 I0915 12:01:33.371720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:01:33.372189 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:01:33.372183487 +0000 UTC m=+2031.350883764 I0915 12:01:33.376847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.531574 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-vnc" condition "Ready" to 2026-09-15 12:02:24.531559236 +0000 UTC m=+2082.510259523 I0915 12:02:24.531891 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-api" condition "Ready" to 2026-09-15 12:02:24.531881926 +0000 UTC m=+2082.510582223 I0915 12:02:24.532006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8zkl6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:02:24.532080 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-vnc" condition "Issuing" to 2026-09-15 12:02:24.532071603 +0000 UTC m=+2082.510771900 I0915 12:02:24.532217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8zkl6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:02:24.532243 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-api" condition "Issuing" to 2026-09-15 12:02:24.532237458 +0000 UTC m=+2082.510937745 I0915 12:02:24.559714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8zkl6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.559836 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-vnc" condition "Ready" to 2026-09-15 12:02:24.559828218 +0000 UTC m=+2082.538528505 I0915 12:02:24.560722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8zkl6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-api\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.560804 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8zkl6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:02:24.560845 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8zkl6-api" condition "Issuing" to 2026-09-15 12:02:24.560837969 +0000 UTC m=+2082.539538266 I0915 12:02:24.646357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8zkl6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.683341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8zkl6-vnc-rtswd" condition "Approved" to 2026-09-15 12:02:24.683331084 +0000 UTC m=+2082.662031371 I0915 12:02:24.715431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8zkl6-vnc-rtswd" condition "Ready" to 2026-09-15 12:02:24.714005098 +0000 UTC m=+2082.692705375 I0915 12:02:24.738125 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8zkl6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:02:24.738112564 +0000 UTC m=+2082.716812841 I0915 12:02:24.754298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8zkl6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.754609 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8zkl6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:02:24.754603856 +0000 UTC m=+2082.733304123 I0915 12:02:24.763323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-8zkl6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.772106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8zkl6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.841219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8zkl6-api-zwf8l" condition "Approved" to 2026-09-15 12:02:24.841204286 +0000 UTC m=+2082.819904563 I0915 12:02:24.855905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8zkl6-api-zwf8l" condition "Ready" to 2026-09-15 12:02:24.855896784 +0000 UTC m=+2082.834597051 I0915 12:02:24.878887 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8zkl6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:02:24.878874394 +0000 UTC m=+2082.857574671 I0915 12:02:24.895521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8zkl6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-api\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:02:24.895803 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8zkl6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:02:24.8957973 +0000 UTC m=+2082.874497577 I0915 12:02:24.915018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8zkl6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8zkl6-api\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:04:30.036590 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-09-15 12:04:30.036572201 +0000 UTC m=+2208.015272518 I0915 12:04:30.036616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:04:30.036892 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-09-15 12:04:30.036850839 +0000 UTC m=+2208.015551126 I0915 12:04:30.064640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:04:30.064982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:04:30.065010 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-09-15 12:04:30.065003787 +0000 UTC m=+2208.043704074 I0915 12:04:30.354422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:04:30.368540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-d9wlr" condition "Approved" to 2026-09-15 12:04:30.3685317 +0000 UTC m=+2208.347231987 I0915 12:04:30.394397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-d9wlr" condition "Ready" to 2026-09-15 12:04:30.394384189 +0000 UTC m=+2208.373084476 I0915 12:04:30.431529 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:04:30.43151423 +0000 UTC m=+2208.410214527 I0915 12:04:30.458783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:04:30.459096 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:04:30.459091571 +0000 UTC m=+2208.437791848 I0915 12:04:30.486485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:10.364501 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-15 12:08:10.364459476 +0000 UTC m=+2428.343159763 I0915 12:08:10.364686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:08:10.364793 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-15 12:08:10.364782797 +0000 UTC m=+2428.343483114 I0915 12:08:10.383668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:10.383788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:08:10.383813 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-15 12:08:10.383806656 +0000 UTC m=+2428.362506943 I0915 12:08:10.593741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-2gxhh" condition "Approved" to 2026-09-15 12:08:10.593726326 +0000 UTC m=+2428.572426643 I0915 12:08:10.611435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-2gxhh" condition "Ready" to 2026-09-15 12:08:10.611426836 +0000 UTC m=+2428.590127113 I0915 12:08:10.645326 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:08:10.645309648 +0000 UTC m=+2428.624009935 I0915 12:08:10.671524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:11.818725 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-15 12:08:11.818698928 +0000 UTC m=+2429.797399245 I0915 12:08:11.818839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:08:11.818879 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-15 12:08:11.818868263 +0000 UTC m=+2429.797568550 I0915 12:08:11.839079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:11.839209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:08:11.839233 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-15 12:08:11.839226914 +0000 UTC m=+2429.817927181 I0915 12:08:12.112892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:12.142086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-72nf6" condition "Approved" to 2026-09-15 12:08:12.142075516 +0000 UTC m=+2430.120775783 I0915 12:08:12.197885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-72nf6" condition "Ready" to 2026-09-15 12:08:12.197874417 +0000 UTC m=+2430.176574694 I0915 12:08:12.230933 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:08:12.230921044 +0000 UTC m=+2430.209621321 I0915 12:08:12.254663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:12.257135 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:08:12.257120393 +0000 UTC m=+2430.235820670 I0915 12:08:12.274772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:08:12.276294 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:08:12.276288037 +0000 UTC m=+2430.254988314 I0915 12:10:26.064224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:10:26.064303 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-15 12:10:26.064283773 +0000 UTC m=+2564.042984080 I0915 12:10:26.064236 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-15 12:10:26.064222121 +0000 UTC m=+2564.042922408 E0915 12:10:26.086341 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.086446 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-15 12:10:26.086435428 +0000 UTC m=+2564.065135735 I0915 12:10:26.086482 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.092739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.092886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:10:26.092916 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-15 12:10:26.092908525 +0000 UTC m=+2564.071608812 E0915 12:10:26.102990 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0915 12:10:26.103156 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.103192 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0915 12:10:26.103237 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0915 12:10:26.147760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.164408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9k5jw" condition "Approved" to 2026-09-15 12:10:26.164397403 +0000 UTC m=+2564.143097680 I0915 12:10:26.185866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9k5jw" condition "Ready" to 2026-09-15 12:10:26.185857106 +0000 UTC m=+2564.164557383 I0915 12:10:26.215984 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:26.215972504 +0000 UTC m=+2564.194672781 I0915 12:10:26.236955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.734725 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-15 12:10:26.734687503 +0000 UTC m=+2564.713387810 I0915 12:10:26.735269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:10:26.735330 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-15 12:10:26.735320483 +0000 UTC m=+2564.714020790 E0915 12:10:26.757549 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.757626 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-15 12:10:26.757611692 +0000 UTC m=+2564.736312009 I0915 12:10:26.757696 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.761040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.761162 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-15 12:10:26.761150919 +0000 UTC m=+2564.739851236 E0915 12:10:26.776070 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0915 12:10:26.776430 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0915 12:10:26.776500 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0915 12:10:26.776583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0915 12:10:26.795847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.833929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zg8nj" condition "Approved" to 2026-09-15 12:10:26.833909385 +0000 UTC m=+2564.812609702 I0915 12:10:26.864747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zg8nj" condition "Ready" to 2026-09-15 12:10:26.864689633 +0000 UTC m=+2564.843389940 I0915 12:10:26.895925 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:26.895901183 +0000 UTC m=+2564.874601500 I0915 12:10:26.922272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:26.922657 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:26.922646537 +0000 UTC m=+2564.901346854 I0915 12:10:26.944988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:27.577400 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-15 12:10:27.57738125 +0000 UTC m=+2565.556081567 I0915 12:10:27.577614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:10:27.577674 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-15 12:10:27.577663218 +0000 UTC m=+2565.556363525 I0915 12:10:27.595894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:27.596055 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-15 12:10:27.596041058 +0000 UTC m=+2565.574741365 I0915 12:10:27.627578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:27.669123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pvmft" condition "Approved" to 2026-09-15 12:10:27.669110404 +0000 UTC m=+2565.647810681 I0915 12:10:27.689128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pvmft" condition "Ready" to 2026-09-15 12:10:27.689116604 +0000 UTC m=+2565.667816891 I0915 12:10:31.104349 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.104333666 +0000 UTC m=+2569.083033983 I0915 12:10:31.117838 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-pvmft" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.117826277 +0000 UTC m=+2569.096526584 I0915 12:10:31.145365 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.145352865 +0000 UTC m=+2569.124053142 I0915 12:10:31.172677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:31.172986 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.172979737 +0000 UTC m=+2569.151680014 I0915 12:10:31.178695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:31.194093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:10:31.194420 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.194413219 +0000 UTC m=+2569.173113486 I0915 12:10:31.777019 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:10:31.776991394 +0000 UTC m=+2569.755691681 I0915 12:12:48.021285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:12:48.021330 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-15 12:12:48.021320564 +0000 UTC m=+2706.000020871 I0915 12:12:48.021562 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-15 12:12:48.021550912 +0000 UTC m=+2706.000251189 I0915 12:12:48.045866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:12:48.045981 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-15 12:12:48.045971785 +0000 UTC m=+2706.024672102 I0915 12:12:48.205862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:12:48.235607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-4b8sl" condition "Approved" to 2026-09-15 12:12:48.235594371 +0000 UTC m=+2706.214294648 I0915 12:12:48.258686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-4b8sl" condition "Ready" to 2026-09-15 12:12:48.258675184 +0000 UTC m=+2706.237375471 I0915 12:12:48.299947 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:12:48.2999311 +0000 UTC m=+2706.278631407 I0915 12:12:48.324123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:12:48.324741 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:12:48.324691484 +0000 UTC m=+2706.303391801 I0915 12:12:48.342320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:12:48.351894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:35.984882 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-15 12:13:35.984868733 +0000 UTC m=+2753.963569050 I0915 12:13:36.012827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:36.012871 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-15 12:13:36.012860066 +0000 UTC m=+2753.991560373 I0915 12:13:36.013084 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-15 12:13:36.013039991 +0000 UTC m=+2753.991740318 I0915 12:13:36.040607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:36.040718 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-15 12:13:36.040683742 +0000 UTC m=+2754.019384049 E0915 12:13:36.055080 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0915 12:13:36.129822 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-15 12:13:36.129794237 +0000 UTC m=+2754.108494554 I0915 12:13:36.179074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:36.179130 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-15 12:13:36.179117119 +0000 UTC m=+2754.157817426 I0915 12:13:36.179666 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-15 12:13:36.179654306 +0000 UTC m=+2754.158354613 E0915 12:13:36.194479 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0915 12:13:36.205410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:36.205501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:36.205528 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-15 12:13:36.205517604 +0000 UTC m=+2754.184217921 I0915 12:13:36.456964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:36.464361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2j4wx" condition "Approved" to 2026-09-15 12:13:36.464336697 +0000 UTC m=+2754.443036974 I0915 12:13:36.487163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2j4wx" condition "Ready" to 2026-09-15 12:13:36.487146731 +0000 UTC m=+2754.465847048 I0915 12:13:36.540489 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:36.540475236 +0000 UTC m=+2754.519175513 I0915 12:13:36.593354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.114024 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-15 12:13:37.114006185 +0000 UTC m=+2755.092706472 I0915 12:13:37.140304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:37.140335 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-15 12:13:37.140328947 +0000 UTC m=+2755.119029224 I0915 12:13:37.140626 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-15 12:13:37.140622306 +0000 UTC m=+2755.119322573 I0915 12:13:37.165025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.165191 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-15 12:13:37.165166013 +0000 UTC m=+2755.143866300 I0915 12:13:37.370163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.407519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rzkzq" condition "Approved" to 2026-09-15 12:13:37.407505585 +0000 UTC m=+2755.386205862 I0915 12:13:37.426980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rzkzq" condition "Ready" to 2026-09-15 12:13:37.426969827 +0000 UTC m=+2755.405670094 I0915 12:13:37.467468 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:37.4674573 +0000 UTC m=+2755.446157577 I0915 12:13:37.490512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.490747 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:37.490741479 +0000 UTC m=+2755.469441756 I0915 12:13:37.517738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.517996 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:37.517990129 +0000 UTC m=+2755.496690396 I0915 12:13:37.635217 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-15 12:13:37.635204149 +0000 UTC m=+2755.613904426 I0915 12:13:37.662580 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-15 12:13:37.662567343 +0000 UTC m=+2755.641267610 I0915 12:13:37.663208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:37.665971 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-15 12:13:37.665955106 +0000 UTC m=+2755.644655433 I0915 12:13:37.680077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:37.680126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:37.680144 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-15 12:13:37.680138798 +0000 UTC m=+2755.658839085 I0915 12:13:37.987255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rhfx8" condition "Approved" to 2026-09-15 12:13:37.987243773 +0000 UTC m=+2755.965944040 I0915 12:13:38.012013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rhfx8" condition "Ready" to 2026-09-15 12:13:38.012004546 +0000 UTC m=+2755.990704823 I0915 12:13:38.046324 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:38.046311002 +0000 UTC m=+2756.025011279 I0915 12:13:38.064846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:38.065168 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:38.065162365 +0000 UTC m=+2756.043862652 I0915 12:13:38.101641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:38.202738 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-15 12:13:38.202725896 +0000 UTC m=+2756.181426173 I0915 12:13:38.221919 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-15 12:13:38.22190805 +0000 UTC m=+2756.200608327 I0915 12:13:38.222012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:38.222091 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-15 12:13:38.222038893 +0000 UTC m=+2756.200739170 I0915 12:13:38.242415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:38.242506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:13:38.242526 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-15 12:13:38.242521518 +0000 UTC m=+2756.221221795 I0915 12:13:38.409164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:38.451351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-brpbz" condition "Approved" to 2026-09-15 12:13:38.451338968 +0000 UTC m=+2756.430039245 I0915 12:13:38.658723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-brpbz" condition "Ready" to 2026-09-15 12:13:38.658712514 +0000 UTC m=+2756.637412791 I0915 12:13:38.997321 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:13:38.997310397 +0000 UTC m=+2756.976010684 I0915 12:13:39.146008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:13:39.443954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:10.403343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:17:10.403387 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-09-15 12:17:10.403378461 +0000 UTC m=+2968.382078768 I0915 12:17:10.403635 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-09-15 12:17:10.403610008 +0000 UTC m=+2968.382310285 I0915 12:17:10.434568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:10.434758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:17:10.434790 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-09-15 12:17:10.434782398 +0000 UTC m=+2968.413482675 I0915 12:17:10.777741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:10.787497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-gbpdv" condition "Approved" to 2026-09-15 12:17:10.787474741 +0000 UTC m=+2968.766175118 I0915 12:17:10.808725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-gbpdv" condition "Ready" to 2026-09-15 12:17:10.808711787 +0000 UTC m=+2968.787412074 I0915 12:17:10.845184 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:17:10.845166968 +0000 UTC m=+2968.823867255 I0915 12:17:10.872319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:10.872771 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:17:10.872760467 +0000 UTC m=+2968.851460754 I0915 12:17:10.891819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:10.892237 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:17:10.89223001 +0000 UTC m=+2968.870930287 I0915 12:17:12.838615 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-09-15 12:17:12.838590685 +0000 UTC m=+2970.817290972 I0915 12:17:12.839057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:17:12.839149 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-09-15 12:17:12.839134891 +0000 UTC m=+2970.817835198 I0915 12:17:12.877314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:17:12.877479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:17:12.877508 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-09-15 12:17:12.877500679 +0000 UTC m=+2970.856200976 I0915 12:17:13.023419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jmj8c" condition "Approved" to 2026-09-15 12:17:13.023397333 +0000 UTC m=+2971.002097610 I0915 12:17:13.046742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jmj8c" condition "Ready" to 2026-09-15 12:17:13.046732904 +0000 UTC m=+2971.025433181 I0915 12:17:13.083169 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:17:13.083156283 +0000 UTC m=+2971.061856560 I0915 12:17:13.110176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:21:51.667679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:21:51.667733 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-09-15 12:21:51.667726648 +0000 UTC m=+3249.646426925 I0915 12:21:51.667877 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-15 12:21:51.667849201 +0000 UTC m=+3249.646549508 I0915 12:21:51.690273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:21:51.690456 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-15 12:21:51.69044244 +0000 UTC m=+3249.669142747 I0915 12:21:51.790393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:21:51.830582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-9gvbc" condition "Approved" to 2026-09-15 12:21:51.830555932 +0000 UTC m=+3249.809256249 I0915 12:21:51.860096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-9gvbc" condition "Ready" to 2026-09-15 12:21:51.860084393 +0000 UTC m=+3249.838784680 I0915 12:21:51.895523 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:21:51.895506724 +0000 UTC m=+3249.874207011 I0915 12:21:51.924761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:21:51.925235 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:21:51.92522891 +0000 UTC m=+3249.903929187 I0915 12:21:51.945513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:21:51.956679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:22:27.445518 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 12:22:27.445497039 +0000 UTC m=+3285.424197346 I0915 12:22:27.445530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:22:27.445758 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 12:22:27.445733726 +0000 UTC m=+3285.424434043 I0915 12:22:27.466269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:22:27.466375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 12:22:27.466407 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 12:22:27.466397416 +0000 UTC m=+3285.445097733 I0915 12:22:27.678611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5ng78" condition "Approved" to 2026-09-15 12:22:27.678597226 +0000 UTC m=+3285.657297513 I0915 12:22:27.705541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5ng78" condition "Ready" to 2026-09-15 12:22:27.705526217 +0000 UTC m=+3285.684226524 I0915 12:22:27.746766 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:22:27.746745214 +0000 UTC m=+3285.725445521 I0915 12:22:27.773402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:22:27.773955 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 12:22:27.773947403 +0000 UTC m=+3285.752647680 I0915 12:22:27.791265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 12:22:27.821079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"