I0409 11:16:41.771495 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 11:16:41.771686 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 11:16:41.771814 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 11:16:41.776609 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 11:16:41.777246 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 11:16:41.777267 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 11:16:41.777338 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 11:16:41.780505 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 11:16:41.796485 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 11:16:41.800175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 11:16:41.804658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 11:16:41.809363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 11:16:41.812320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 11:16:41.814971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 11:16:41.817507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 11:16:41.819430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 11:16:41.821491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 11:16:41.827557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 11:16:41.831119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 11:16:41.833425 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 11:16:41.833467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 11:16:41.839875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 11:16:41.841915 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 11:16:41.841955 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 11:16:41.842064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 11:16:41.844491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 11:16:41.846804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 11:16:41.846827 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 11:16:41.846836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 11:16:41.846907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 11:16:41.849361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 11:16:41.855213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 11:16:41.859648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 11:16:41.861562 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.862008 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.864108 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.865783 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.880298 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.901140 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.909786 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.926320 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.938994 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:41.958158 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 11:16:53.573618 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 11:16:53.573577594 +0000 UTC m=+11.831280319 I0409 11:16:54.315092 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 11:16:54.315074873 +0000 UTC m=+12.572777658 I0409 11:16:54.316554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:16:54.316667 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 11:16:54.316652676 +0000 UTC m=+12.574355451 E0409 11:16:54.331424 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 11:16:54.331574 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 11:16:54.331563281 +0000 UTC m=+12.589266026 E0409 11:16:54.331635 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 11:16:54.338898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:16:54.340193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:16:54.340295 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 11:16:54.340226985 +0000 UTC m=+12.597929750 E0409 11:16:54.347713 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 11:16:54.347835 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 11:16:54.347893 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 11:16:54.347926 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 11:16:54.374389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:16:54.382154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-txpjw" condition "Approved" to 2026-04-09 11:16:54.382141492 +0000 UTC m=+12.639844237 I0409 11:16:54.395616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-txpjw" condition "Ready" to 2026-04-09 11:16:54.395604706 +0000 UTC m=+12.653307471 I0409 11:16:54.418855 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:16:54.418840908 +0000 UTC m=+12.676543673 I0409 11:16:54.436758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:16:54.483471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:16:59.348163 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:16:59.348150139 +0000 UTC m=+17.605852874 I0409 11:17:21.897088 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 11:17:21.89702895 +0000 UTC m=+40.154731705 I0409 11:17:21.897092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:17:21.897163 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 11:17:21.897136592 +0000 UTC m=+40.154839327 I0409 11:17:21.908044 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 11:17:21.908032526 +0000 UTC m=+40.165735261 I0409 11:17:21.929048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:17:21.929137 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 11:17:21.929130184 +0000 UTC m=+40.186832909 I0409 11:17:22.178670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:17:22.213723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lljlt" condition "Approved" to 2026-04-09 11:17:22.213706094 +0000 UTC m=+40.471408859 I0409 11:17:22.248185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lljlt" condition "Ready" to 2026-04-09 11:17:22.248174018 +0000 UTC m=+40.505876733 I0409 11:17:22.274262 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:17:22.274246163 +0000 UTC m=+40.531948928 I0409 11:17:22.293140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:17:22.293521 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:17:22.293513966 +0000 UTC m=+40.551216701 I0409 11:17:22.313922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:17:22.326871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:21:45.330277 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-09 11:21:45.330245941 +0000 UTC m=+303.587948666 I0409 11:21:45.330440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:21:45.330480 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-09 11:21:45.330475364 +0000 UTC m=+303.588178099 I0409 11:21:45.357643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:21:45.357717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:21:45.357742 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-09 11:21:45.357736958 +0000 UTC m=+303.615439673 I0409 11:21:45.540037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-fthpf" condition "Approved" to 2026-04-09 11:21:45.540022318 +0000 UTC m=+303.797725083 I0409 11:21:45.566987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-fthpf" condition "Ready" to 2026-04-09 11:21:45.56697486 +0000 UTC m=+303.824677595 I0409 11:21:45.594136 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:21:45.594117373 +0000 UTC m=+303.851820098 I0409 11:21:45.612356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:21:45.612788 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:21:45.612779935 +0000 UTC m=+303.870482680 I0409 11:21:45.633623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:50.321528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:22:50.321613 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 11:22:50.321585862 +0000 UTC m=+368.579288627 I0409 11:22:50.321874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 11:22:50.321852386 +0000 UTC m=+368.579555141 I0409 11:22:50.334249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:50.334309 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 11:22:50.334302513 +0000 UTC m=+368.592005248 E0409 11:22:50.336692 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 11:22:50.336722 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 11:22:50.336715821 +0000 UTC m=+368.594418556 E0409 11:22:50.336763 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 11:22:50.348619 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 11:22:50.348733 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 11:22:50.348766 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 11:22:50.348816 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 11:22:50.352900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:50.373999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s67hg" condition "Approved" to 2026-04-09 11:22:50.373984803 +0000 UTC m=+368.631687568 I0409 11:22:50.388372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s67hg" condition "Ready" to 2026-04-09 11:22:50.388359143 +0000 UTC m=+368.646061878 I0409 11:22:50.408899 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:22:50.408884477 +0000 UTC m=+368.666587232 I0409 11:22:50.427855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:50.428707 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:22:50.428698211 +0000 UTC m=+368.686400946 I0409 11:22:50.444997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:50.445660 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:22:50.445647462 +0000 UTC m=+368.703350227 I0409 11:22:50.448492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:22:55.349528 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:22:55.349518163 +0000 UTC m=+373.607220898 I0409 11:23:35.464593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.464628 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 11:23:35.46462116 +0000 UTC m=+413.722323895 I0409 11:23:35.464821 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 11:23:35.464818063 +0000 UTC m=+413.722520778 I0409 11:23:35.502680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.502711 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 11:23:35.502704931 +0000 UTC m=+413.760407656 I0409 11:23:35.502964 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 11:23:35.502959624 +0000 UTC m=+413.760662349 I0409 11:23:35.515690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.515713 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 11:23:35.515708505 +0000 UTC m=+413.773411240 I0409 11:23:35.515841 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 11:23:35.515838497 +0000 UTC m=+413.773541222 I0409 11:23:35.537738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.537799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 11:23:35.537793147 +0000 UTC m=+413.795495872 I0409 11:23:35.591328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.591506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.591532 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 11:23:35.591526922 +0000 UTC m=+413.849229637 I0409 11:23:35.602192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.602281 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 11:23:35.60227061 +0000 UTC m=+413.859973375 I0409 11:23:35.747909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.758341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.791986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k95vs" condition "Approved" to 2026-04-09 11:23:35.791978093 +0000 UTC m=+414.049680818 I0409 11:23:35.800151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rnvs6" condition "Approved" to 2026-04-09 11:23:35.80014411 +0000 UTC m=+414.057846845 I0409 11:23:35.817630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k95vs" condition "Ready" to 2026-04-09 11:23:35.817620096 +0000 UTC m=+414.075322831 I0409 11:23:35.820658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rnvs6" condition "Ready" to 2026-04-09 11:23:35.820640203 +0000 UTC m=+414.078342928 I0409 11:23:35.878884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.878913 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 11:23:35.878906521 +0000 UTC m=+414.136609246 I0409 11:23:35.904084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:35.906679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:35.906703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 11:23:35.906696 +0000 UTC m=+414.164398735 I0409 11:23:35.913097 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:35.913085427 +0000 UTC m=+414.170788152 I0409 11:23:35.913212 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:35.913204808 +0000 UTC m=+414.170907523 I0409 11:23:35.987877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzv62" condition "Approved" to 2026-04-09 11:23:35.98786661 +0000 UTC m=+414.245569335 I0409 11:23:36.091314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:36.091611 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:36.091604208 +0000 UTC m=+414.349306943 I0409 11:23:36.184197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:36.591554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzv62" condition "Ready" to 2026-04-09 11:23:36.591543632 +0000 UTC m=+414.849246357 I0409 11:23:36.640462 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:36.64044859 +0000 UTC m=+414.898151315 I0409 11:23:36.984863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0409 11:23:37.131942 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-ffjl7\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0409 11:23:37.191714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rlzmz" condition "Approved" to 2026-04-09 11:23:37.191699422 +0000 UTC m=+415.449402157 I0409 11:23:37.283218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:37.337754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njvhl" condition "Approved" to 2026-04-09 11:23:37.337739339 +0000 UTC m=+415.595442074 I0409 11:23:37.742885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rlzmz" condition "Ready" to 2026-04-09 11:23:37.742870082 +0000 UTC m=+416.000572847 I0409 11:23:37.832930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:37.894438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njvhl" condition "Ready" to 2026-04-09 11:23:37.894425725 +0000 UTC m=+416.152128460 I0409 11:23:38.734888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:38.782857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:38.835474 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:38.835456106 +0000 UTC m=+417.093158871 I0409 11:23:38.980696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:39.200788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:39.201166 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:39.201157802 +0000 UTC m=+417.458860537 I0409 11:23:39.483823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:39.584202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:39.632428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:43.476863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" condition "Ready" to 2026-04-09 11:23:43.476824897 +0000 UTC m=+421.734527652 I0409 11:23:43.477122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:43.477163 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" condition "Issuing" to 2026-04-09 11:23:43.477153861 +0000 UTC m=+421.734856606 I0409 11:23:43.491269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:43.491366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:43.491406 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" condition "Issuing" to 2026-04-09 11:23:43.491398739 +0000 UTC m=+421.749101464 I0409 11:23:43.805069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vpmfh-qb2rj" condition "Approved" to 2026-04-09 11:23:43.805052779 +0000 UTC m=+422.062755524 I0409 11:23:43.820080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vpmfh-qb2rj" condition "Ready" to 2026-04-09 11:23:43.820068716 +0000 UTC m=+422.077771451 I0409 11:23:43.854208 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:43.85419382 +0000 UTC m=+422.111896555 I0409 11:23:43.877433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:43.877677 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:43.877671188 +0000 UTC m=+422.135373913 I0409 11:23:43.893632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vpmfh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:57.522359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:57.522420 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 11:23:57.522409305 +0000 UTC m=+435.780112070 I0409 11:23:57.523806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 11:23:57.523789172 +0000 UTC m=+435.781491917 I0409 11:23:57.544385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:57.544473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:23:57.544504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 11:23:57.544497056 +0000 UTC m=+435.802199791 I0409 11:23:57.854802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:57.868516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qqkgs" condition "Approved" to 2026-04-09 11:23:57.868498648 +0000 UTC m=+436.126201383 I0409 11:23:57.892639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qqkgs" condition "Ready" to 2026-04-09 11:23:57.892627144 +0000 UTC m=+436.150329879 I0409 11:23:57.926049 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:23:57.926035688 +0000 UTC m=+436.183738423 I0409 11:23:57.946951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:23:58.000853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:27:25.133512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:27:25.133565 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 11:27:25.133557782 +0000 UTC m=+643.391260517 I0409 11:27:25.133718 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 11:27:25.133713464 +0000 UTC m=+643.391416199 I0409 11:27:25.149997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:27:25.150210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:27:25.150261 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 11:27:25.150254119 +0000 UTC m=+643.407956844 I0409 11:27:25.279965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-msclk" condition "Approved" to 2026-04-09 11:27:25.279939601 +0000 UTC m=+643.537642386 I0409 11:27:25.311197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-msclk" condition "Ready" to 2026-04-09 11:27:25.31118842 +0000 UTC m=+643.568891135 I0409 11:27:25.347269 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:27:25.347254356 +0000 UTC m=+643.604957091 I0409 11:27:25.379827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:27:25.432395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:28:09.409484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:28:09.409544 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 11:28:09.40953749 +0000 UTC m=+687.667240225 I0409 11:28:09.410115 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 11:28:09.410108576 +0000 UTC m=+687.667811311 I0409 11:28:09.439478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:28:09.439546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 11:28:09.439739 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 11:28:09.439729517 +0000 UTC m=+687.697432282 I0409 11:28:09.751073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:28:09.759052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c89q9" condition "Approved" to 2026-04-09 11:28:09.759033109 +0000 UTC m=+688.016735834 I0409 11:28:09.779996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c89q9" condition "Ready" to 2026-04-09 11:28:09.779986706 +0000 UTC m=+688.037689431 I0409 11:28:09.803204 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:28:09.803193771 +0000 UTC m=+688.060896496 I0409 11:28:09.820443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 11:28:09.820964 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 11:28:09.82095478 +0000 UTC m=+688.078657535 I0409 11:28:09.843843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"