I0419 13:26:19.205825 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 13:26:19.205990 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 13:26:19.206081 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 13:26:19.211180 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 13:26:19.211520 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 13:26:19.211637 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 13:26:19.211733 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 13:26:19.213938 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 13:26:19.227062 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 13:26:19.230900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 13:26:19.239351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 13:26:19.241252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 13:26:19.243691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 13:26:19.246175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 13:26:19.249371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 13:26:19.252275 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 13:26:19.252309 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 13:26:19.252317 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 13:26:19.252437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 13:26:19.254606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 13:26:19.259364 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 13:26:19.259388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 13:26:19.259450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 13:26:19.261315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 13:26:19.263010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 13:26:19.264812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 13:26:19.266359 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 13:26:19.266407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 13:26:19.268455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 13:26:19.270363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 13:26:19.272052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 13:26:19.279113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 13:26:19.282395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 13:26:19.284115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.285314 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.285862 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.303400 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.321266 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.334443 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.372825 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.374669 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.385816 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:19.407105 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:26:33.222527 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 13:26:33.222511434 +0000 UTC m=+14.051876276 I0419 13:26:33.968812 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:26:33.968798873 +0000 UTC m=+14.798163705 I0419 13:26:33.969971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:26:33.970002 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:26:33.96999518 +0000 UTC m=+14.799360022 E0419 13:26:33.982926 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:26:33.983008 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 13:26:33.982998669 +0000 UTC m=+14.812363511 E0419 13:26:33.983041 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:26:33.988965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:33.989017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:26:33.989030 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:26:33.989026115 +0000 UTC m=+14.818390917 E0419 13:26:34.000695 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 13:26:34.000831 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:26:34.000876 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:26:34.000922 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 13:26:34.029498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:34.040895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j58v2" condition "Approved" to 2026-04-19 13:26:34.04088412 +0000 UTC m=+14.870248932 I0419 13:26:34.062167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j58v2" condition "Ready" to 2026-04-19 13:26:34.062154418 +0000 UTC m=+14.891519230 I0419 13:26:34.089733 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:34.089724028 +0000 UTC m=+14.919088840 I0419 13:26:34.106321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:34.106824 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:34.106813779 +0000 UTC m=+14.936178621 I0419 13:26:34.123382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:39.001054 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:39.001040364 +0000 UTC m=+19.830405186 I0419 13:27:08.271280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:27:08.271332 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 13:27:08.271324736 +0000 UTC m=+49.100689548 I0419 13:27:08.271340 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:27:08.271322796 +0000 UTC m=+49.100687608 I0419 13:27:08.290840 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 13:27:08.290830753 +0000 UTC m=+49.120195555 I0419 13:27:08.304302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:27:08.304376 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:27:08.304369194 +0000 UTC m=+49.133734006 I0419 13:27:08.411596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:27:08.447243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8hz79" condition "Approved" to 2026-04-19 13:27:08.44722799 +0000 UTC m=+49.276592832 I0419 13:27:08.482270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8hz79" condition "Ready" to 2026-04-19 13:27:08.482252306 +0000 UTC m=+49.311617148 I0419 13:27:08.516351 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:27:08.51633622 +0000 UTC m=+49.345701032 I0419 13:27:08.535311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:27:08.535598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:27:08.535590211 +0000 UTC m=+49.364955013 I0419 13:27:08.561185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:27:08.563107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:38.203733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:31:38.203826 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-04-19 13:31:38.203814121 +0000 UTC m=+319.033178953 I0419 13:31:38.203742 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-04-19 13:31:38.20372548 +0000 UTC m=+319.033090312 I0419 13:31:38.443671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:38.443813 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-04-19 13:31:38.443758101 +0000 UTC m=+319.273122943 I0419 13:31:38.929390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:39.057674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-mxtrz" condition "Approved" to 2026-04-19 13:31:39.057658498 +0000 UTC m=+319.887023330 I0419 13:31:39.100559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-mxtrz" condition "Ready" to 2026-04-19 13:31:39.100549537 +0000 UTC m=+319.929914349 I0419 13:31:39.126362 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:39.126342163 +0000 UTC m=+319.955707005 I0419 13:31:39.146820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:39.148193 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:39.148184553 +0000 UTC m=+319.977549365 I0419 13:31:39.168012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:39.183872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:43.635085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:43.635443 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:32:43.635434181 +0000 UTC m=+384.464799023 I0419 13:32:43.635131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:32:43.635119026 +0000 UTC m=+384.464483858 E0419 13:32:43.829134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:32:43.829365 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 13:32:43.829307105 +0000 UTC m=+384.658671947 E0419 13:32:43.829487 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:32:43.836333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:43.836535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:43.836638 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:32:43.836628933 +0000 UTC m=+384.665993765 E0419 13:32:44.360475 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 13:32:44.360550 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:32:44.360578 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:32:44.360606 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 13:32:45.145105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:45.145412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7w6tq" condition "Approved" to 2026-04-19 13:32:45.145405485 +0000 UTC m=+385.974770287 I0419 13:32:45.163958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7w6tq" condition "Ready" to 2026-04-19 13:32:45.163947112 +0000 UTC m=+385.993311924 I0419 13:32:45.184767 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:45.184738885 +0000 UTC m=+386.014103707 I0419 13:32:45.205678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:45.206013 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:45.206003835 +0000 UTC m=+386.035368667 I0419 13:32:45.220439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:45.220648 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:45.22064293 +0000 UTC m=+386.050007732 I0419 13:32:49.361081 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:49.361063728 +0000 UTC m=+390.190428580 I0419 13:33:30.006578 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:33:30.006564289 +0000 UTC m=+430.835929101 I0419 13:33:30.007005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:30.007037 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:33:30.007029197 +0000 UTC m=+430.836393999 I0419 13:33:30.035662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:30.035711 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:33:30.035703386 +0000 UTC m=+430.865068198 I0419 13:33:30.036220 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:33:30.036213044 +0000 UTC m=+430.865577856 I0419 13:33:30.036453 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:33:30.036438477 +0000 UTC m=+430.865803309 I0419 13:33:30.037006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:30.037027 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 13:33:30.037021186 +0000 UTC m=+430.866385988 I0419 13:33:30.056611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.056702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:30.056739 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:33:30.056733691 +0000 UTC m=+430.886098493 I0419 13:33:30.082261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.082282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.082359 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:33:30.082351351 +0000 UTC m=+430.911716153 I0419 13:33:30.086157 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:33:30.082318801 +0000 UTC m=+430.911683603 I0419 13:33:30.251498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.258984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4svn" condition "Approved" to 2026-04-19 13:33:30.258975295 +0000 UTC m=+431.088340097 I0419 13:33:30.275361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4svn" condition "Ready" to 2026-04-19 13:33:30.275352727 +0000 UTC m=+431.104717539 I0419 13:33:30.305792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.308458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.322994 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:30.322964157 +0000 UTC m=+431.152328969 I0419 13:33:30.531404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hcjqx" condition "Approved" to 2026-04-19 13:33:30.53139313 +0000 UTC m=+431.360757932 I0419 13:33:30.532329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4m25f" condition "Approved" to 2026-04-19 13:33:30.532317005 +0000 UTC m=+431.361681817 I0419 13:33:30.536635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.537044 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:30.53703161 +0000 UTC m=+431.366396432 I0419 13:33:30.628914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4m25f" condition "Ready" to 2026-04-19 13:33:30.628899559 +0000 UTC m=+431.458264401 I0419 13:33:30.628957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hcjqx" condition "Ready" to 2026-04-19 13:33:30.62894583 +0000 UTC m=+431.458310642 I0419 13:33:30.631235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:30.631544 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:30.631538692 +0000 UTC m=+431.460903504 I0419 13:33:31.074963 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:31.07494835 +0000 UTC m=+431.904313142 I0419 13:33:31.098358 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:31.098344464 +0000 UTC m=+431.927709276 I0419 13:33:31.253562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:31.254075 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:31.254061934 +0000 UTC m=+432.083426776 I0419 13:33:31.399137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:31.701532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:31.779779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:42.030190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" condition "Ready" to 2026-04-19 13:33:42.030149518 +0000 UTC m=+442.859514330 I0419 13:33:42.030326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:42.030375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" condition "Issuing" to 2026-04-19 13:33:42.030365341 +0000 UTC m=+442.859730153 I0419 13:33:42.045649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:42.045757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:42.045782 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" condition "Issuing" to 2026-04-19 13:33:42.045775357 +0000 UTC m=+442.875140169 I0419 13:33:42.202911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jmgdr-p9bbs" condition "Approved" to 2026-04-19 13:33:42.202809487 +0000 UTC m=+443.032174279 I0419 13:33:42.219145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jmgdr-p9bbs" condition "Ready" to 2026-04-19 13:33:42.219133178 +0000 UTC m=+443.048497980 I0419 13:33:42.253952 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:42.253938764 +0000 UTC m=+443.083303566 I0419 13:33:42.273651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:42.274995 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:42.274986721 +0000 UTC m=+443.104351533 I0419 13:33:42.292497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:42.300670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jmgdr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:34:08.891719 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:34:08.891703772 +0000 UTC m=+469.721068574 I0419 13:34:08.892058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:34:08.892079 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 13:34:08.892072969 +0000 UTC m=+469.721437781 I0419 13:34:08.909485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:34:08.909552 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:34:08.909545588 +0000 UTC m=+469.738910390 I0419 13:34:09.235415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:34:09.267104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4knj8" condition "Approved" to 2026-04-19 13:34:09.267092131 +0000 UTC m=+470.096456953 I0419 13:34:09.292618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4knj8" condition "Ready" to 2026-04-19 13:34:09.292606748 +0000 UTC m=+470.121971560 I0419 13:34:09.332575 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:34:09.332560867 +0000 UTC m=+470.161925679 I0419 13:34:09.353041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:34:09.353414 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:34:09.353406601 +0000 UTC m=+470.182771403 I0419 13:34:09.373282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:34:09.373783 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:34:09.373772676 +0000 UTC m=+470.203137488 I0419 13:37:05.831704 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 13:37:05.831685485 +0000 UTC m=+646.661050327 I0419 13:37:05.832133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:05.832229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:37:05.832160052 +0000 UTC m=+646.661524854 I0419 13:37:05.848886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:05.848950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:05.849067 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:37:05.84895981 +0000 UTC m=+646.678324622 I0419 13:37:06.174701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:06.186834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zkldx" condition "Approved" to 2026-04-19 13:37:06.186826056 +0000 UTC m=+647.016190868 I0419 13:37:06.210212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zkldx" condition "Ready" to 2026-04-19 13:37:06.210203579 +0000 UTC m=+647.039568381 I0419 13:37:06.249765 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:06.24975576 +0000 UTC m=+647.079120562 I0419 13:37:06.282892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:06.331475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:49.076305 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 13:37:49.076289197 +0000 UTC m=+689.905653999 I0419 13:37:49.076541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:49.076557 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 13:37:49.076554102 +0000 UTC m=+689.905918904 I0419 13:37:49.099761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:49.099848 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 13:37:49.099841113 +0000 UTC m=+689.929205905 I0419 13:37:49.194108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:49.234488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t58mc" condition "Approved" to 2026-04-19 13:37:49.234474553 +0000 UTC m=+690.063839365 I0419 13:37:49.255958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t58mc" condition "Ready" to 2026-04-19 13:37:49.255949286 +0000 UTC m=+690.085314098 I0419 13:37:49.285453 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:49.285435756 +0000 UTC m=+690.114800598 I0419 13:37:49.313397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"