I0913 17:42:20.458999 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0913 17:42:20.459128 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0913 17:42:20.459357 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0913 17:42:20.464547 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0913 17:42:20.465527 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0913 17:42:20.465612 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0913 17:42:20.465630 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0913 17:42:20.469613 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0913 17:42:20.486319 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0913 17:42:20.491804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0913 17:42:20.495600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0913 17:42:20.502500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0913 17:42:20.506458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0913 17:42:20.506574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0913 17:42:20.510399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0913 17:42:20.514620 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0913 17:42:20.518904 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0913 17:42:20.518984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0913 17:42:20.522993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0913 17:42:20.527299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0913 17:42:20.532854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0913 17:42:20.536576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0913 17:42:20.536614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0913 17:42:20.536723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0913 17:42:20.540649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0913 17:42:20.544429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0913 17:42:20.548457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0913 17:42:20.552463 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0913 17:42:20.552659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0913 17:42:20.556584 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0913 17:42:20.556718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0913 17:42:20.560737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0913 17:42:20.566928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0913 17:42:20.569968 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.570005 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.570391 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.570730 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.595891 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.614084 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.637283 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.658880 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.675874 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:20.683206 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0913 17:42:31.397951 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-13 17:42:31.397902691 +0000 UTC m=+10.975280280 I0913 17:42:32.092273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:42:32.092294 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-13 17:42:32.092281478 +0000 UTC m=+11.669659077 I0913 17:42:32.092319 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-13 17:42:32.092309788 +0000 UTC m=+11.669687397 E0913 17:42:32.105151 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0913 17:42:32.105242 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-13 17:42:32.105232278 +0000 UTC m=+11.682609877 E0913 17:42:32.105272 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0913 17:42:32.109169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:32.109261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:42:32.109292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-13 17:42:32.109283313 +0000 UTC m=+11.686660902 E0913 17:42:32.116431 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0913 17:42:32.116560 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0913 17:42:32.116619 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0913 17:42:32.116674 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0913 17:42:32.155976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:32.156331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zhxms" condition "Approved" to 2026-09-13 17:42:32.156315955 +0000 UTC m=+11.733693524 I0913 17:42:32.170902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zhxms" condition "Ready" to 2026-09-13 17:42:32.170887846 +0000 UTC m=+11.748265435 I0913 17:42:32.197316 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:42:32.197305711 +0000 UTC m=+11.774683300 I0913 17:42:32.216819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:37.117125 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:42:37.117107891 +0000 UTC m=+16.694485480 I0913 17:42:56.541403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:42:56.541496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-13 17:42:56.541484247 +0000 UTC m=+36.118861836 I0913 17:42:56.541435 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-13 17:42:56.541272881 +0000 UTC m=+36.118650470 I0913 17:42:56.554904 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-13 17:42:56.554889542 +0000 UTC m=+36.132267101 I0913 17:42:56.567842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:56.568043 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-13 17:42:56.568018507 +0000 UTC m=+36.145396106 I0913 17:42:56.745870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:56.799619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k6nc9" condition "Approved" to 2026-09-13 17:42:56.79960245 +0000 UTC m=+36.376980039 I0913 17:42:56.841455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k6nc9" condition "Ready" to 2026-09-13 17:42:56.841431041 +0000 UTC m=+36.418808610 I0913 17:42:56.877540 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:42:56.877523776 +0000 UTC m=+36.454901365 I0913 17:42:56.906613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:56.906994 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:42:56.906987516 +0000 UTC m=+36.484365075 I0913 17:42:56.912276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:56.924942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:42:56.925303 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:42:56.925293201 +0000 UTC m=+36.502670770 I0913 17:47:51.773311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-123.nip.io-tls" condition "Ready" to 2026-09-13 17:47:51.773291678 +0000 UTC m=+331.350669267 I0913 17:47:51.773356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-123.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:47:51.773476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-123.nip.io-tls" condition "Issuing" to 2026-09-13 17:47:51.773460313 +0000 UTC m=+331.350837902 I0913 17:47:51.790483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:47:51.790558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-123.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:47:51.790578 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-123.nip.io-tls" condition "Issuing" to 2026-09-13 17:47:51.790569507 +0000 UTC m=+331.367947066 I0913 17:47:51.908503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:47:51.918683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-123.nip.io-tls-2f8qd" condition "Approved" to 2026-09-13 17:47:51.918666716 +0000 UTC m=+331.496044305 I0913 17:47:51.950269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-123.nip.io-tls-2f8qd" condition "Ready" to 2026-09-13 17:47:51.950257994 +0000 UTC m=+331.527635583 I0913 17:47:51.980837 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:47:51.980824399 +0000 UTC m=+331.558201978 I0913 17:47:52.007016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:47:52.007591 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:47:52.007581458 +0000 UTC m=+331.584959047 I0913 17:47:52.020480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:47:52.032011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:01.566274 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-13 17:49:01.566230621 +0000 UTC m=+401.143608180 I0913 17:49:01.566427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:01.566480 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-13 17:49:01.566473279 +0000 UTC m=+401.143850878 E0913 17:49:01.580617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0913 17:49:01.580678 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-13 17:49:01.580666514 +0000 UTC m=+401.158044113 E0913 17:49:01.580755 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0913 17:49:01.583316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:01.583377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:01.583393 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-13 17:49:01.583388977 +0000 UTC m=+401.160766536 E0913 17:49:01.592918 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0913 17:49:01.593076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0913 17:49:01.593119 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0913 17:49:01.593156 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0913 17:49:01.618884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:01.621779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vcdd4" condition "Approved" to 2026-09-13 17:49:01.621765191 +0000 UTC m=+401.199142790 I0913 17:49:01.634484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vcdd4" condition "Ready" to 2026-09-13 17:49:01.63447035 +0000 UTC m=+401.211847939 I0913 17:49:01.658187 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:01.658172576 +0000 UTC m=+401.235550165 I0913 17:49:01.678303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:01.678714 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:01.678707204 +0000 UTC m=+401.256084763 I0913 17:49:01.696495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:06.593759 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:06.593747724 +0000 UTC m=+406.171125283 I0913 17:49:45.540458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.540527 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-13 17:49:45.540502636 +0000 UTC m=+445.117880195 I0913 17:49:45.540571 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-13 17:49:45.540552757 +0000 UTC m=+445.117930336 I0913 17:49:45.545158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.545186 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-13 17:49:45.545180979 +0000 UTC m=+445.122558528 I0913 17:49:45.545613 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-13 17:49:45.545608832 +0000 UTC m=+445.122986391 I0913 17:49:45.570479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-13 17:49:45.570465633 +0000 UTC m=+445.147843192 I0913 17:49:45.570869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.570886 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-13 17:49:45.570883356 +0000 UTC m=+445.148260915 I0913 17:49:45.584526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:45.584572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.584587 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-13 17:49:45.584583085 +0000 UTC m=+445.161960644 I0913 17:49:45.584923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:45.584961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.584970 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-13 17:49:45.584967797 +0000 UTC m=+445.162345356 I0913 17:49:45.592356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:45.592459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:45.592504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-13 17:49:45.592499097 +0000 UTC m=+445.169876646 I0913 17:49:45.885237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:45.890635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgpzh" condition "Approved" to 2026-09-13 17:49:45.890624521 +0000 UTC m=+445.468002090 I0913 17:49:45.905669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t4s8j" condition "Approved" to 2026-09-13 17:49:45.905662021 +0000 UTC m=+445.483039580 I0913 17:49:45.906700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gh4rs" condition "Approved" to 2026-09-13 17:49:45.906695563 +0000 UTC m=+445.484073122 I0913 17:49:45.913600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgpzh" condition "Ready" to 2026-09-13 17:49:45.913595955 +0000 UTC m=+445.490973514 I0913 17:49:45.923668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t4s8j" condition "Ready" to 2026-09-13 17:49:45.923656652 +0000 UTC m=+445.501034211 I0913 17:49:45.929036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gh4rs" condition "Ready" to 2026-09-13 17:49:45.929024487 +0000 UTC m=+445.506402056 I0913 17:49:46.035340 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:46.03533019 +0000 UTC m=+445.612707749 I0913 17:49:46.139584 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:46.13957194 +0000 UTC m=+445.716949499 I0913 17:49:46.186339 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:46.18632917 +0000 UTC m=+445.763706729 I0913 17:49:46.290735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:46.437530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:46.437856 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:46.437850498 +0000 UTC m=+446.015228067 I0913 17:49:46.535215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:46.535666 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:46.535655982 +0000 UTC m=+446.113033571 E0913 17:49:46.582846 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-877pn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0913 17:49:46.986254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:47.111849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:54.462564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:54.462572 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" condition "Ready" to 2026-09-13 17:49:54.462548637 +0000 UTC m=+454.039926286 I0913 17:49:54.462596 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" condition "Issuing" to 2026-09-13 17:49:54.462589508 +0000 UTC m=+454.039967067 I0913 17:49:54.478053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jzf78-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:54.478108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:49:54.478121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" condition "Issuing" to 2026-09-13 17:49:54.478115233 +0000 UTC m=+454.055492792 I0913 17:49:54.657176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jzf78-tr4v2" condition "Approved" to 2026-09-13 17:49:54.657156133 +0000 UTC m=+454.234533722 I0913 17:49:54.675988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jzf78-tr4v2" condition "Ready" to 2026-09-13 17:49:54.67597753 +0000 UTC m=+454.253355089 I0913 17:49:54.703008 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:54.702996096 +0000 UTC m=+454.280373655 I0913 17:49:54.725544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jzf78-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:49:54.725829 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:49:54.725824334 +0000 UTC m=+454.303201893 I0913 17:49:54.748645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jzf78-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jzf78-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:50:23.392349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:50:23.392390 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-13 17:50:23.39238119 +0000 UTC m=+482.969758759 I0913 17:50:23.392398 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-13 17:50:23.3923806 +0000 UTC m=+482.969758169 I0913 17:50:23.404403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:50:23.404465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:50:23.404479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-13 17:50:23.40447299 +0000 UTC m=+482.981850569 I0913 17:50:24.088157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:50:24.629611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7r52k" condition "Approved" to 2026-09-13 17:50:24.629589664 +0000 UTC m=+484.206967263 I0913 17:50:24.655255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7r52k" condition "Ready" to 2026-09-13 17:50:24.655241529 +0000 UTC m=+484.232619128 I0913 17:50:24.685912 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:50:24.685893787 +0000 UTC m=+484.263271386 I0913 17:50:24.710693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:50:24.711084 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:50:24.711075088 +0000 UTC m=+484.288452657 I0913 17:50:24.737473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:50:24.737772 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:50:24.737765405 +0000 UTC m=+484.315142964 I0913 17:53:33.654167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-13 17:53:33.654128494 +0000 UTC m=+673.231506053 I0913 17:53:33.654296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:53:33.654370 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-13 17:53:33.6543377 +0000 UTC m=+673.231715289 I0913 17:53:33.680985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:33.681104 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-13 17:53:33.681094107 +0000 UTC m=+673.258471696 I0913 17:53:33.919655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:33.958981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fnwvt" condition "Approved" to 2026-09-13 17:53:33.958968062 +0000 UTC m=+673.536345631 I0913 17:53:33.981442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fnwvt" condition "Ready" to 2026-09-13 17:53:33.981427458 +0000 UTC m=+673.558805027 I0913 17:53:34.011999 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:53:34.011980581 +0000 UTC m=+673.589358160 I0913 17:53:34.030912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:34.031360 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:53:34.031354372 +0000 UTC m=+673.608731941 I0913 17:53:34.046680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:34.052908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:34.053383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:53:34.053677 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:53:34.053670904 +0000 UTC m=+673.631048453 I0913 17:55:57.787818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:55:57.787832 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-13 17:55:57.787816531 +0000 UTC m=+817.365194120 I0913 17:55:57.787888 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-13 17:55:57.787878643 +0000 UTC m=+817.365256222 I0913 17:55:57.804827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:55:57.804917 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-13 17:55:57.804908723 +0000 UTC m=+817.382286312 I0913 17:55:58.053774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:55:58.099268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dfb55" condition "Approved" to 2026-09-13 17:55:58.09925105 +0000 UTC m=+817.676628649 I0913 17:55:58.124094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dfb55" condition "Ready" to 2026-09-13 17:55:58.124084909 +0000 UTC m=+817.701462478 I0913 17:55:58.155726 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:55:58.155716574 +0000 UTC m=+817.733094133 I0913 17:55:58.184487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:55:58.184965 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:55:58.184957287 +0000 UTC m=+817.762334856 I0913 17:55:58.215991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:57:02.334082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 17:57:02.334116 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-13 17:57:02.334104859 +0000 UTC m=+881.911482418 I0913 17:57:02.334135 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-13 17:57:02.33412239 +0000 UTC m=+881.911499989 I0913 17:57:02.358001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:57:02.358081 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-13 17:57:02.358073071 +0000 UTC m=+881.935450640 I0913 17:57:02.563847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 17:57:02.609966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8jzkt" condition "Approved" to 2026-09-13 17:57:02.609953332 +0000 UTC m=+882.187330921 I0913 17:57:02.640753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8jzkt" condition "Ready" to 2026-09-13 17:57:02.640737252 +0000 UTC m=+882.218114841 I0913 17:57:02.678414 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 17:57:02.678401072 +0000 UTC m=+882.255778631 I0913 17:57:02.710141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:00:03.274600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:00:03.274653 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-13 18:00:03.274641481 +0000 UTC m=+1062.852019080 I0913 18:00:03.274801 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-13 18:00:03.274771785 +0000 UTC m=+1062.852149364 I0913 18:00:03.290394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:00:03.290474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:00:03.290549 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-13 18:00:03.290541616 +0000 UTC m=+1062.867919185 I0913 18:00:03.435444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gv87m" condition "Approved" to 2026-09-13 18:00:03.435425811 +0000 UTC m=+1063.012803380 I0913 18:00:03.461833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gv87m" condition "Ready" to 2026-09-13 18:00:03.461814326 +0000 UTC m=+1063.039191915 I0913 18:00:03.500392 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:00:03.500380164 +0000 UTC m=+1063.077757753 I0913 18:00:03.541002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:00:03.595554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:06:25.701174 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-13 18:06:25.701137415 +0000 UTC m=+1445.278514974 I0913 18:06:25.701556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:06:25.701574 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-13 18:06:25.701570289 +0000 UTC m=+1445.278947848 I0913 18:06:25.728163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:06:25.728204 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-13 18:06:25.728200049 +0000 UTC m=+1445.305577608 I0913 18:06:25.848047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:06:25.887650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rd7ch" condition "Approved" to 2026-09-13 18:06:25.887640114 +0000 UTC m=+1445.465017683 I0913 18:06:25.911261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rd7ch" condition "Ready" to 2026-09-13 18:06:25.911248032 +0000 UTC m=+1445.488625601 I0913 18:06:25.954888 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:06:25.954877541 +0000 UTC m=+1445.532255110 I0913 18:06:25.979380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:06:25.979752 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:06:25.979743937 +0000 UTC m=+1445.557121526 I0913 18:06:26.004342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:07:54.750344 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-13 18:07:54.750327147 +0000 UTC m=+1534.327704736 I0913 18:07:54.750411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:07:54.750489 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-13 18:07:54.750479681 +0000 UTC m=+1534.327857270 I0913 18:07:54.772364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:07:54.772446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:07:54.772477 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-13 18:07:54.772468421 +0000 UTC m=+1534.349846020 I0913 18:07:54.947507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mgl8d" condition "Approved" to 2026-09-13 18:07:54.94749812 +0000 UTC m=+1534.524875679 I0913 18:07:54.964339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mgl8d" condition "Ready" to 2026-09-13 18:07:54.964329162 +0000 UTC m=+1534.541706721 I0913 18:07:54.993969 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:07:54.993958604 +0000 UTC m=+1534.571336163 I0913 18:07:55.014620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:07:55.020730 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:07:55.020719539 +0000 UTC m=+1534.598097098 I0913 18:07:55.047516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:07:55.048628 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:07:55.048617588 +0000 UTC m=+1534.625995167 I0913 18:08:51.370054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:08:51.370090 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-13 18:08:51.370082431 +0000 UTC m=+1590.947459990 I0913 18:08:51.370577 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-13 18:08:51.370571815 +0000 UTC m=+1590.947949374 I0913 18:08:51.394865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:51.394946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:08:51.394977 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-13 18:08:51.394971208 +0000 UTC m=+1590.972348767 I0913 18:08:51.459373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8zzqn" condition "Approved" to 2026-09-13 18:08:51.459351418 +0000 UTC m=+1591.036729047 I0913 18:08:51.481405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8zzqn" condition "Ready" to 2026-09-13 18:08:51.481387119 +0000 UTC m=+1591.058764718 I0913 18:08:51.515056 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:08:51.515040413 +0000 UTC m=+1591.092417982 I0913 18:08:51.537481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:51.537759 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:08:51.537748405 +0000 UTC m=+1591.115125964 I0913 18:08:51.547580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:51.561111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:52.152721 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-13 18:08:52.152701788 +0000 UTC m=+1591.730079377 I0913 18:08:52.153116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:08:52.153173 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-13 18:08:52.153158812 +0000 UTC m=+1591.730536401 I0913 18:08:52.169613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:52.169671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:08:52.169683 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-13 18:08:52.169679506 +0000 UTC m=+1591.747057065 I0913 18:08:52.227523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sjm85" condition "Approved" to 2026-09-13 18:08:52.227509106 +0000 UTC m=+1591.804886695 I0913 18:08:52.242865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sjm85" condition "Ready" to 2026-09-13 18:08:52.242827772 +0000 UTC m=+1591.820205361 I0913 18:08:52.273273 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:08:52.273260229 +0000 UTC m=+1591.850637788 I0913 18:08:52.292045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:52.293612 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:08:52.293603288 +0000 UTC m=+1591.870980847 I0913 18:08:52.301978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:52.312642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:08:52.313062 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:08:52.31304994 +0000 UTC m=+1591.890427539 I0913 18:08:52.852589 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-13 18:08:52.852578197 +0000 UTC m=+1592.429955756 I0913 18:08:53.565447 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-13 18:08:53.565433731 +0000 UTC m=+1593.142811320 I0913 18:09:40.664120 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-13 18:09:40.66410473 +0000 UTC m=+1640.241482319 I0913 18:09:40.664540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:09:40.664564 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-13 18:09:40.664560603 +0000 UTC m=+1640.241938162 I0913 18:09:40.693234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:09:40.693280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:09:40.693292 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-13 18:09:40.693287728 +0000 UTC m=+1640.270665287 I0913 18:09:42.629644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:09:42.659454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-bqx4j" condition "Approved" to 2026-09-13 18:09:42.659434441 +0000 UTC m=+1642.236812030 I0913 18:09:42.685571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-bqx4j" condition "Ready" to 2026-09-13 18:09:42.685545776 +0000 UTC m=+1642.262923365 I0913 18:09:42.725340 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:09:42.725324987 +0000 UTC m=+1642.302702556 I0913 18:09:42.758455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:10.195188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:12:10.195891 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-13 18:12:10.195474248 +0000 UTC m=+1789.772851847 I0913 18:12:10.196826 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-13 18:12:10.19523779 +0000 UTC m=+1789.772615349 I0913 18:12:10.224761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:10.224900 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-13 18:12:10.224889307 +0000 UTC m=+1789.802266896 I0913 18:12:10.347509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:10.376755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-j7f4f" condition "Approved" to 2026-09-13 18:12:10.376743674 +0000 UTC m=+1789.954121233 I0913 18:12:10.396943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-j7f4f" condition "Ready" to 2026-09-13 18:12:10.396931596 +0000 UTC m=+1789.974309155 I0913 18:12:10.425265 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:12:10.425251223 +0000 UTC m=+1790.002628782 I0913 18:12:10.454865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:11.687631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:12:11.687670 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-13 18:12:11.687660849 +0000 UTC m=+1791.265038448 I0913 18:12:11.688091 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-13 18:12:11.688083642 +0000 UTC m=+1791.265461231 I0913 18:12:11.705300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:11.705500 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-13 18:12:11.705489222 +0000 UTC m=+1791.282866811 I0913 18:12:11.810453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:12:11.843381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-x222t" condition "Approved" to 2026-09-13 18:12:11.84335948 +0000 UTC m=+1791.420737069 I0913 18:12:11.867009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-x222t" condition "Ready" to 2026-09-13 18:12:11.866990137 +0000 UTC m=+1791.444367716 I0913 18:12:11.900768 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:12:11.900743005 +0000 UTC m=+1791.478120604 I0913 18:12:11.926732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:15:13.148119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:15:13.148222 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-13 18:15:13.148161202 +0000 UTC m=+1972.725538801 I0913 18:15:13.148520 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-13 18:15:13.148510272 +0000 UTC m=+1972.725887911 I0913 18:15:13.167995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:15:13.168158 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-13 18:15:13.168142409 +0000 UTC m=+1972.745519998 I0913 18:15:13.362772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:15:13.401906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-46d9m" condition "Approved" to 2026-09-13 18:15:13.401892212 +0000 UTC m=+1972.979269781 I0913 18:15:13.424663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-46d9m" condition "Ready" to 2026-09-13 18:15:13.424633602 +0000 UTC m=+1973.002011201 I0913 18:15:13.462534 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:15:13.462520514 +0000 UTC m=+1973.039898073 I0913 18:15:13.490359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.356099 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-vnc" condition "Ready" to 2026-09-13 18:16:00.356075315 +0000 UTC m=+2019.933452904 I0913 18:16:00.356166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rxq9p-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:16:00.356228 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-vnc" condition "Issuing" to 2026-09-13 18:16:00.356208349 +0000 UTC m=+2019.933585938 I0913 18:16:00.358173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rxq9p-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:16:00.358210 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-api" condition "Issuing" to 2026-09-13 18:16:00.358201189 +0000 UTC m=+2019.935578768 I0913 18:16:00.358642 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-api" condition "Ready" to 2026-09-13 18:16:00.358636262 +0000 UTC m=+2019.936013831 I0913 18:16:00.379531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rxq9p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-api\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.379680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rxq9p-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:16:00.379774 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-api" condition "Issuing" to 2026-09-13 18:16:00.379762895 +0000 UTC m=+2019.957140484 I0913 18:16:00.384066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rxq9p-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.384272 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rxq9p-vnc" condition "Ready" to 2026-09-13 18:16:00.384261063 +0000 UTC m=+2019.961638682 I0913 18:16:00.705591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rxq9p-api-9qczw" condition "Approved" to 2026-09-13 18:16:00.705578754 +0000 UTC m=+2020.282956323 I0913 18:16:00.730633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rxq9p-api-9qczw" condition "Ready" to 2026-09-13 18:16:00.730599716 +0000 UTC m=+2020.307977265 I0913 18:16:00.754899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-rxq9p-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.773679 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rxq9p-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:16:00.773661998 +0000 UTC m=+2020.351039567 I0913 18:16:00.790869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rxq9p-vnc-gqwzr" condition "Approved" to 2026-09-13 18:16:00.79084939 +0000 UTC m=+2020.368226949 I0913 18:16:00.803042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rxq9p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-api\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.803851 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rxq9p-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:16:00.803839316 +0000 UTC m=+2020.381216905 I0913 18:16:00.810263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rxq9p-vnc-gqwzr" condition "Ready" to 2026-09-13 18:16:00.810251151 +0000 UTC m=+2020.387628710 I0913 18:16:00.829458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-rxq9p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-api\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.836199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-rxq9p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-api\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:16:00.840969 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rxq9p-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:16:00.840937366 +0000 UTC m=+2020.418314915 I0913 18:16:00.863214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-rxq9p-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rxq9p-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:18:07.992947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:18:07.993008 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-09-13 18:18:07.992995772 +0000 UTC m=+2147.570373371 I0913 18:18:07.993056 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-09-13 18:18:07.993033533 +0000 UTC m=+2147.570411122 I0913 18:18:08.013500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:18:08.013634 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-09-13 18:18:08.01362241 +0000 UTC m=+2147.591000029 I0913 18:18:08.295279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:18:08.333071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-chs5v" condition "Approved" to 2026-09-13 18:18:08.333046935 +0000 UTC m=+2147.910424534 I0913 18:18:08.357442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-chs5v" condition "Ready" to 2026-09-13 18:18:08.357427536 +0000 UTC m=+2147.934805105 I0913 18:18:08.387913 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:18:08.387887904 +0000 UTC m=+2147.965265503 I0913 18:18:08.424371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:18:08.479541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:44.296583 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-13 18:21:44.296508878 +0000 UTC m=+2363.873886507 I0913 18:21:44.296603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:21:44.296926 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-13 18:21:44.296914689 +0000 UTC m=+2363.874292288 I0913 18:21:44.315530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:44.315626 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-13 18:21:44.315616182 +0000 UTC m=+2363.892993771 I0913 18:21:44.499010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:44.525910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lgjjc" condition "Approved" to 2026-09-13 18:21:44.52589487 +0000 UTC m=+2364.103272469 I0913 18:21:44.553806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lgjjc" condition "Ready" to 2026-09-13 18:21:44.553791325 +0000 UTC m=+2364.131168914 I0913 18:21:44.582800 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:21:44.582787091 +0000 UTC m=+2364.160164680 I0913 18:21:44.610114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:44.610440 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:21:44.610434457 +0000 UTC m=+2364.187812016 I0913 18:21:44.641638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:45.798444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:21:45.798471 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-13 18:21:45.798465609 +0000 UTC m=+2365.375843168 I0913 18:21:45.798578 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-13 18:21:45.798559302 +0000 UTC m=+2365.375936891 I0913 18:21:45.821344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:45.822487 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-13 18:21:45.822465932 +0000 UTC m=+2365.399843651 I0913 18:21:46.070599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:46.109709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-sfx8x" condition "Approved" to 2026-09-13 18:21:46.109692542 +0000 UTC m=+2365.687070131 I0913 18:21:46.134103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-sfx8x" condition "Ready" to 2026-09-13 18:21:46.134090017 +0000 UTC m=+2365.711467606 I0913 18:21:46.171072 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:21:46.171054969 +0000 UTC m=+2365.748432538 I0913 18:21:46.191444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:46.191785 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:21:46.19177589 +0000 UTC m=+2365.769153479 I0913 18:21:46.199440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:46.216968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:46.219628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:21:46.220169 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:21:46.220158217 +0000 UTC m=+2365.797535806 I0913 18:23:59.538216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:23:59.538291 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-13 18:23:59.538281389 +0000 UTC m=+2499.115658978 I0913 18:23:59.538307 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-13 18:23:59.538146466 +0000 UTC m=+2499.115524085 E0913 18:23:59.556087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:23:59.556185 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-13 18:23:59.556172589 +0000 UTC m=+2499.133550188 I0913 18:23:59.556223 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:23:59.559209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.559411 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-13 18:23:59.559403431 +0000 UTC m=+2499.136781000 E0913 18:23:59.566801 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0913 18:23:59.567756 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:23:59.567809 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0913 18:23:59.567856 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0913 18:23:59.586956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.589385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.589585 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-13 18:23:59.589575301 +0000 UTC m=+2499.166952910 I0913 18:23:59.594941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lb6ng" condition "Approved" to 2026-09-13 18:23:59.594922493 +0000 UTC m=+2499.172300092 I0913 18:23:59.608216 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-13 18:23:59.608202911 +0000 UTC m=+2499.185580510 I0913 18:23:59.615580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lb6ng" condition "Ready" to 2026-09-13 18:23:59.615569571 +0000 UTC m=+2499.192947140 I0913 18:23:59.618014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.650436 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:23:59.650415023 +0000 UTC m=+2499.227792622 I0913 18:23:59.676387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.677001 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:23:59.676984969 +0000 UTC m=+2499.254362568 I0913 18:23:59.702988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:23:59.707173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.210191 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-13 18:24:00.210174223 +0000 UTC m=+2499.787551822 I0913 18:24:00.210471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:24:00.210496 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-13 18:24:00.210492032 +0000 UTC m=+2499.787869591 E0913 18:24:00.222087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:24:00.222143 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-13 18:24:00.222130294 +0000 UTC m=+2499.799507893 I0913 18:24:00.222217 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:24:00.230530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.230651 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-13 18:24:00.230642126 +0000 UTC m=+2499.808019695 E0913 18:24:00.233985 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0913 18:24:00.234281 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0913 18:24:00.234324 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0913 18:24:00.234368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0913 18:24:00.252712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.285415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-jz5jd" condition "Approved" to 2026-09-13 18:24:00.285392975 +0000 UTC m=+2499.862770574 I0913 18:24:00.309498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-jz5jd" condition "Ready" to 2026-09-13 18:24:00.309484891 +0000 UTC m=+2499.886862460 I0913 18:24:00.346947 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:00.346931048 +0000 UTC m=+2499.924308647 I0913 18:24:00.367515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.367875 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:00.367865674 +0000 UTC m=+2499.945243273 I0913 18:24:00.453682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.512560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.974761 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-13 18:24:00.974740555 +0000 UTC m=+2500.552118144 I0913 18:24:00.974785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:24:00.974896 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-13 18:24:00.974882249 +0000 UTC m=+2500.552259848 I0913 18:24:00.996123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:00.996263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:24:00.996303 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-13 18:24:00.99629266 +0000 UTC m=+2500.573670249 I0913 18:24:01.042791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:01.050438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bdt97" condition "Approved" to 2026-09-13 18:24:01.05041968 +0000 UTC m=+2500.627797269 I0913 18:24:01.162032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bdt97" condition "Ready" to 2026-09-13 18:24:01.162014469 +0000 UTC m=+2500.739392058 I0913 18:24:04.567524 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:04.567513066 +0000 UTC m=+2504.144890655 I0913 18:24:04.586927 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-bdt97" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:04.586909449 +0000 UTC m=+2504.164287048 I0913 18:24:04.619236 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:04.619220369 +0000 UTC m=+2504.196597958 I0913 18:24:04.650148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:04.650493 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:04.6504842 +0000 UTC m=+2504.227861789 I0913 18:24:04.679679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:24:04.679955 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:04.679945219 +0000 UTC m=+2504.257322808 I0913 18:24:05.235646 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:24:05.235629052 +0000 UTC m=+2504.813006641 I0913 18:26:18.326493 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-13 18:26:18.326480876 +0000 UTC m=+2637.903858445 I0913 18:26:18.326496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:26:18.326610 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-13 18:26:18.32660118 +0000 UTC m=+2637.903978769 I0913 18:26:18.345787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:26:18.345997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:26:18.346084 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-13 18:26:18.346072452 +0000 UTC m=+2637.923450041 I0913 18:26:18.537847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:26:18.548383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hpmg2" condition "Approved" to 2026-09-13 18:26:18.548373786 +0000 UTC m=+2638.125751355 I0913 18:26:18.571558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hpmg2" condition "Ready" to 2026-09-13 18:26:18.571541188 +0000 UTC m=+2638.148918787 I0913 18:26:18.607668 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:26:18.607655207 +0000 UTC m=+2638.185032766 I0913 18:26:18.635938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:26:18.638485 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:26:18.638470668 +0000 UTC m=+2638.215848227 I0913 18:26:18.661921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:05.351285 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-13 18:27:05.351273691 +0000 UTC m=+2684.928651250 I0913 18:27:05.369492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:05.369527 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-13 18:27:05.369518726 +0000 UTC m=+2684.946896315 I0913 18:27:05.369912 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-13 18:27:05.369904458 +0000 UTC m=+2684.947282047 I0913 18:27:05.386386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:05.386473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:05.386495 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-13 18:27:05.386487183 +0000 UTC m=+2684.963864772 E0913 18:27:05.406206 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0913 18:27:05.462369 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-13 18:27:05.462350279 +0000 UTC m=+2685.039727868 I0913 18:27:05.482194 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-13 18:27:05.482183372 +0000 UTC m=+2685.059560961 I0913 18:27:05.482596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:05.482628 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-13 18:27:05.482622536 +0000 UTC m=+2685.060000125 I0913 18:27:05.497821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:05.497934 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-13 18:27:05.497926913 +0000 UTC m=+2685.075304502 E0913 18:27:05.531846 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0913 18:27:05.616659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:05.665452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9mc74" condition "Approved" to 2026-09-13 18:27:05.665441317 +0000 UTC m=+2685.242818876 I0913 18:27:05.695941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9mc74" condition "Ready" to 2026-09-13 18:27:05.695925338 +0000 UTC m=+2685.273302937 I0913 18:27:05.732692 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:05.732677906 +0000 UTC m=+2685.310055475 I0913 18:27:05.753261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.248835 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-13 18:27:06.248822727 +0000 UTC m=+2685.826200286 I0913 18:27:06.262981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:06.263010 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-13 18:27:06.26300302 +0000 UTC m=+2685.840380579 I0913 18:27:06.263341 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-13 18:27:06.26332406 +0000 UTC m=+2685.840701649 I0913 18:27:06.284815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.284885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:06.284897 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-13 18:27:06.284892885 +0000 UTC m=+2685.862270444 I0913 18:27:06.584293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-jhr5m" condition "Approved" to 2026-09-13 18:27:06.58428073 +0000 UTC m=+2686.161658279 I0913 18:27:06.598899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-jhr5m" condition "Ready" to 2026-09-13 18:27:06.598888005 +0000 UTC m=+2686.176265564 I0913 18:27:06.627653 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:06.627640785 +0000 UTC m=+2686.205018344 I0913 18:27:06.658005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.658320 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:06.65831371 +0000 UTC m=+2686.235691259 I0913 18:27:06.683400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.687408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.689442 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-13 18:27:06.689435691 +0000 UTC m=+2686.266813240 I0913 18:27:06.709860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:06.709887 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-13 18:27:06.709881391 +0000 UTC m=+2686.287258950 I0913 18:27:06.710151 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-13 18:27:06.710147849 +0000 UTC m=+2686.287525398 I0913 18:27:06.721302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.721355 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-13 18:27:06.721348164 +0000 UTC m=+2686.298725723 I0913 18:27:06.802354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:06.837073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kqkqt" condition "Approved" to 2026-09-13 18:27:06.837060751 +0000 UTC m=+2686.414438300 I0913 18:27:06.868903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kqkqt" condition "Ready" to 2026-09-13 18:27:06.868890932 +0000 UTC m=+2686.446268491 I0913 18:27:07.069482 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:07.069469945 +0000 UTC m=+2686.646847504 I0913 18:27:07.134293 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-13 18:27:07.134280471 +0000 UTC m=+2686.711658030 I0913 18:27:07.167583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:07.167848 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:07.167843194 +0000 UTC m=+2686.745220753 I0913 18:27:07.167870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:27:07.167895 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-13 18:27:07.167888465 +0000 UTC m=+2686.745266024 I0913 18:27:07.168015 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-13 18:27:07.168012468 +0000 UTC m=+2686.745390027 I0913 18:27:07.460754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:07.460857 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-13 18:27:07.460850558 +0000 UTC m=+2687.038228117 I0913 18:27:07.508726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:07.812743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:08.013793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-79r5w" condition "Approved" to 2026-09-13 18:27:08.013779048 +0000 UTC m=+2687.591156627 I0913 18:27:08.119777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-79r5w" condition "Ready" to 2026-09-13 18:27:08.119767784 +0000 UTC m=+2687.697145333 I0913 18:27:08.568188 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:08.56816423 +0000 UTC m=+2688.145541819 I0913 18:27:08.715403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:27:08.715814 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:27:08.715804922 +0000 UTC m=+2688.293182511 I0913 18:27:08.910440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:48.011328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:30:48.011439 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-09-13 18:30:48.011353648 +0000 UTC m=+2907.588731207 I0913 18:30:48.011922 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-09-13 18:30:48.011915254 +0000 UTC m=+2907.589292823 I0913 18:30:48.030994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:48.031125 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-09-13 18:30:48.031115748 +0000 UTC m=+2907.608493337 I0913 18:30:48.173910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:48.202801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-zzhx9" condition "Approved" to 2026-09-13 18:30:48.202787257 +0000 UTC m=+2907.780164816 I0913 18:30:48.218733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-zzhx9" condition "Ready" to 2026-09-13 18:30:48.218724573 +0000 UTC m=+2907.796102132 I0913 18:30:48.250945 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:30:48.250934205 +0000 UTC m=+2907.828311764 I0913 18:30:48.269902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:48.270234 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:30:48.270228402 +0000 UTC m=+2907.847605971 I0913 18:30:48.289140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:48.289319 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:30:48.289312752 +0000 UTC m=+2907.866690301 I0913 18:30:50.311333 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-09-13 18:30:50.311320973 +0000 UTC m=+2909.888698532 I0913 18:30:50.311703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:30:50.311714 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-09-13 18:30:50.311711204 +0000 UTC m=+2909.889088763 I0913 18:30:50.341315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:50.341457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:30:50.341490 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-09-13 18:30:50.341477324 +0000 UTC m=+2909.918854923 I0913 18:30:50.495760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-p2npd" condition "Approved" to 2026-09-13 18:30:50.495746842 +0000 UTC m=+2910.073124411 I0913 18:30:50.512606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-p2npd" condition "Ready" to 2026-09-13 18:30:50.512597486 +0000 UTC m=+2910.089975045 I0913 18:30:50.551982 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:30:50.551957852 +0000 UTC m=+2910.129335411 I0913 18:30:50.570939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:30:50.571760 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:30:50.571753304 +0000 UTC m=+2910.149130853 I0913 18:30:50.596037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:07.629730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:35:07.630003 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-09-13 18:35:07.629991199 +0000 UTC m=+3167.207368828 I0913 18:35:07.630067 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-13 18:35:07.630050471 +0000 UTC m=+3167.207428070 I0913 18:35:07.644878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:07.645075 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-13 18:35:07.645064059 +0000 UTC m=+3167.222441648 I0913 18:35:07.841416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:07.875963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6xxcj" condition "Approved" to 2026-09-13 18:35:07.875952699 +0000 UTC m=+3167.453330258 I0913 18:35:07.894339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6xxcj" condition "Ready" to 2026-09-13 18:35:07.894329509 +0000 UTC m=+3167.471707078 I0913 18:35:07.922581 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:35:07.9225701 +0000 UTC m=+3167.499947659 I0913 18:35:07.943453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:42.466704 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-13 18:35:42.46668404 +0000 UTC m=+3202.044061629 I0913 18:35:42.466964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:35:42.467040 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-13 18:35:42.46703208 +0000 UTC m=+3202.044409639 I0913 18:35:42.487355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:42.487498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0913 18:35:42.487550 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-13 18:35:42.487541496 +0000 UTC m=+3202.064919085 I0913 18:35:42.725267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7dz6w" condition "Approved" to 2026-09-13 18:35:42.725258953 +0000 UTC m=+3202.302636522 I0913 18:35:42.751400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7dz6w" condition "Ready" to 2026-09-13 18:35:42.75138893 +0000 UTC m=+3202.328766499 I0913 18:35:42.789031 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:35:42.789018238 +0000 UTC m=+3202.366395797 I0913 18:35:42.816584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:42.817011 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:35:42.817002431 +0000 UTC m=+3202.394379990 I0913 18:35:42.846470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0913 18:35:42.846763 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-13 18:35:42.846757738 +0000 UTC m=+3202.424135297