I0407 00:07:25.330284 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 00:07:25.330382 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 00:07:25.330456 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 00:07:25.333410 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 00:07:25.333849 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 00:07:25.333985 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 00:07:25.333976 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 00:07:25.338973 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 00:07:25.363181 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 00:07:25.368691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 00:07:25.372763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 00:07:25.374703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 00:07:25.376859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 00:07:25.382634 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 00:07:25.385773 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 00:07:25.385796 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 00:07:25.385861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 00:07:25.388471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 00:07:25.391207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 00:07:25.393517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 00:07:25.397043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 00:07:25.401379 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 00:07:25.402110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 00:07:25.409305 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 00:07:25.411717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 00:07:25.413508 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 00:07:25.413553 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 00:07:25.413571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 00:07:25.413583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 00:07:25.415805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 00:07:25.417623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 00:07:25.419439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 00:07:25.422565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 00:07:25.424032 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.424960 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.427178 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.455875 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.462860 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.478572 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.497832 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.514576 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.517576 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:25.532102 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:38.598530 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 00:07:38.598510274 +0000 UTC m=+13.305852142 I0407 00:07:39.498811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:39.498927 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 00:07:39.498913599 +0000 UTC m=+14.206255467 I0407 00:07:39.498932 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:07:39.498882849 +0000 UTC m=+14.206224757 E0407 00:07:39.515562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:39.515698 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 00:07:39.515658778 +0000 UTC m=+14.223000646 E0407 00:07:39.515741 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:39.519093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:39.519262 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:07:39.519247925 +0000 UTC m=+14.226589763 E0407 00:07:39.528568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 00:07:39.528657 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:39.528699 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:39.528739 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 00:07:39.535126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:39.562629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zwdpt" condition "Approved" to 2026-04-07 00:07:39.562609064 +0000 UTC m=+14.269950902 I0407 00:07:39.577502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zwdpt" condition "Ready" to 2026-04-07 00:07:39.577487609 +0000 UTC m=+14.284829457 I0407 00:07:39.615218 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:39.615192645 +0000 UTC m=+14.322534473 I0407 00:07:39.639285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:39.639645 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:39.63963708 +0000 UTC m=+14.346978908 I0407 00:07:39.669779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:44.539679 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:44.539071473 +0000 UTC m=+19.246413331 I0407 00:08:08.224014 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 00:08:08.223997616 +0000 UTC m=+42.931339444 I0407 00:08:08.223963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:08.224548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:08:08.224525387 +0000 UTC m=+42.931867285 I0407 00:08:08.245365 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 00:08:08.245346275 +0000 UTC m=+42.952688143 I0407 00:08:08.254979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:08.255102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:08.255641 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:08:08.255616849 +0000 UTC m=+42.962958727 I0407 00:08:08.452460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:08.467407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sp72z" condition "Approved" to 2026-04-07 00:08:08.467368382 +0000 UTC m=+43.174710210 I0407 00:08:08.502926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sp72z" condition "Ready" to 2026-04-07 00:08:08.502913473 +0000 UTC m=+43.210255311 I0407 00:08:08.540133 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:08.540107898 +0000 UTC m=+43.247449736 I0407 00:08:08.576066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:08.576447 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:08.576440111 +0000 UTC m=+43.283781949 I0407 00:08:08.609744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:54.296393 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready" to 2026-04-07 00:12:54.296350956 +0000 UTC m=+329.003692794 I0407 00:12:54.296791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:54.296878 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Issuing" to 2026-04-07 00:12:54.296869838 +0000 UTC m=+329.004211706 I0407 00:12:54.314162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:54.314360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:54.314448 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Issuing" to 2026-04-07 00:12:54.314438967 +0000 UTC m=+329.021780805 I0407 00:12:54.509870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-q6wbk" condition "Approved" to 2026-04-07 00:12:54.509853014 +0000 UTC m=+329.217194982 I0407 00:12:54.538910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-q6wbk" condition "Ready" to 2026-04-07 00:12:54.53889457 +0000 UTC m=+329.246236448 I0407 00:12:54.565059 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:54.565049369 +0000 UTC m=+329.272391207 I0407 00:12:54.592079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:54.592505 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:54.592498452 +0000 UTC m=+329.299840280 I0407 00:12:54.609708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:54.610908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:54.611443 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:54.611432725 +0000 UTC m=+329.318774593 I0407 00:14:00.577133 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:14:00.577099044 +0000 UTC m=+395.284440892 I0407 00:14:00.577425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:00.577568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 00:14:00.577528764 +0000 UTC m=+395.284870592 E0407 00:14:00.591814 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:14:00.591874 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 00:14:00.591864568 +0000 UTC m=+395.299206406 E0407 00:14:00.592130 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:14:00.594733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:00.594812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:00.594834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 00:14:00.594827215 +0000 UTC m=+395.302169053 E0407 00:14:00.604135 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 00:14:00.604820 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:14:00.604861 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:14:00.605102 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 00:14:00.628587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:00.631553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-568vf" condition "Approved" to 2026-04-07 00:14:00.631525468 +0000 UTC m=+395.338867316 I0407 00:14:00.644029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-568vf" condition "Ready" to 2026-04-07 00:14:00.644016397 +0000 UTC m=+395.351358225 I0407 00:14:00.663745 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:00.663735892 +0000 UTC m=+395.371077730 I0407 00:14:00.678483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:00.678733 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:00.678723226 +0000 UTC m=+395.386065064 I0407 00:14:00.694080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:00.698582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:05.604565 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:05.60454992 +0000 UTC m=+400.311891778 I0407 00:14:48.369368 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 00:14:48.369342607 +0000 UTC m=+443.076684435 I0407 00:14:48.369800 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:48.369820 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:14:48.369817638 +0000 UTC m=+443.077159466 I0407 00:14:48.384300 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 00:14:48.38428785 +0000 UTC m=+443.091629688 I0407 00:14:48.384623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:48.384638 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:14:48.384634892 +0000 UTC m=+443.091976730 I0407 00:14:48.414717 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 00:14:48.41470075 +0000 UTC m=+443.122042568 I0407 00:14:48.415100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:48.415131 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:14:48.415127991 +0000 UTC m=+443.122469819 I0407 00:14:48.420413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.420494 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 00:14:48.420485453 +0000 UTC m=+443.127827281 I0407 00:14:48.429786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.429846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:48.429878 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:14:48.429873835 +0000 UTC m=+443.137215663 I0407 00:14:48.448722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.448803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 00:14:48.448792987 +0000 UTC m=+443.156134815 I0407 00:14:48.706875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.731185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7kc7s" condition "Approved" to 2026-04-07 00:14:48.731173272 +0000 UTC m=+443.438515100 I0407 00:14:48.732012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.753733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-68g5k" condition "Approved" to 2026-04-07 00:14:48.753723314 +0000 UTC m=+443.461065142 I0407 00:14:48.815004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7kc7s" condition "Ready" to 2026-04-07 00:14:48.814992704 +0000 UTC m=+443.522334532 I0407 00:14:48.816497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-68g5k" condition "Ready" to 2026-04-07 00:14:48.816493147 +0000 UTC m=+443.523834965 I0407 00:14:48.884109 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:48.884094321 +0000 UTC m=+443.591436149 I0407 00:14:48.932256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:48.932283 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:14:48.932277182 +0000 UTC m=+443.639619010 I0407 00:14:48.942415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.964787 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:48.964776586 +0000 UTC m=+443.672118414 I0407 00:14:48.985304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:48.985853 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:48.985845234 +0000 UTC m=+443.693187062 I0407 00:14:48.990054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:49.322493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zgprk" condition "Approved" to 2026-04-07 00:14:49.322479802 +0000 UTC m=+444.029821640 I0407 00:14:49.788077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zgprk" condition "Ready" to 2026-04-07 00:14:49.788057115 +0000 UTC m=+444.495398983 I0407 00:14:49.916623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:50.170982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z58rp" condition "Approved" to 2026-04-07 00:14:50.170965838 +0000 UTC m=+444.878307676 I0407 00:14:50.427493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z58rp" condition "Ready" to 2026-04-07 00:14:50.427480315 +0000 UTC m=+445.134822153 I0407 00:14:50.719618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:50.881277 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-z58rp" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-m7szr" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0407 00:14:51.178061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-klg6g" condition "Approved" to 2026-04-07 00:14:51.178045038 +0000 UTC m=+445.885386876 I0407 00:14:51.632726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-klg6g" condition "Ready" to 2026-04-07 00:14:51.632713265 +0000 UTC m=+446.340055103 I0407 00:14:51.868392 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:51.868371964 +0000 UTC m=+446.575713802 I0407 00:14:51.966381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:52.277215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:56.702615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:56.702663 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" condition "Issuing" to 2026-04-07 00:14:56.702649607 +0000 UTC m=+451.409991475 I0407 00:14:56.703273 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" condition "Ready" to 2026-04-07 00:14:56.703263239 +0000 UTC m=+451.410605107 I0407 00:14:56.719961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ps48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:56.720162 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" condition "Ready" to 2026-04-07 00:14:56.720151747 +0000 UTC m=+451.427493585 I0407 00:14:57.113074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ps48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:57.160100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ps48q-r5c6s" condition "Approved" to 2026-04-07 00:14:57.160075321 +0000 UTC m=+451.867417159 I0407 00:14:57.193656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ps48q-r5c6s" condition "Ready" to 2026-04-07 00:14:57.193643828 +0000 UTC m=+451.900985666 I0407 00:14:57.307542 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:57.307530009 +0000 UTC m=+452.014871837 I0407 00:14:57.336652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ps48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ps48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:15:11.384979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:15:11.384958541 +0000 UTC m=+466.092300369 I0407 00:15:11.385453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:15:11.387353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 00:15:11.385492702 +0000 UTC m=+466.092834570 I0407 00:15:11.411967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:15:11.412218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:15:11.412386 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 00:15:11.412375514 +0000 UTC m=+466.119717352 I0407 00:15:11.572303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-56d55" condition "Approved" to 2026-04-07 00:15:11.572283189 +0000 UTC m=+466.279625027 I0407 00:15:11.597160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-56d55" condition "Ready" to 2026-04-07 00:15:11.597148216 +0000 UTC m=+466.304490044 I0407 00:15:11.626466 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:15:11.626446323 +0000 UTC m=+466.333788161 I0407 00:15:11.662510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:34.575663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:18:34.575722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 00:18:34.575706806 +0000 UTC m=+669.283048674 I0407 00:18:34.576405 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:18:34.576382218 +0000 UTC m=+669.283724076 I0407 00:18:34.596243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:34.596356 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:18:34.596345309 +0000 UTC m=+669.303687147 I0407 00:18:34.930221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:34.974598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7jznx" condition "Approved" to 2026-04-07 00:18:34.97458318 +0000 UTC m=+669.681925008 I0407 00:18:34.997495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7jznx" condition "Ready" to 2026-04-07 00:18:34.99747605 +0000 UTC m=+669.704817908 I0407 00:18:35.027144 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:18:35.027124632 +0000 UTC m=+669.734466500 I0407 00:18:35.053677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:35.053973 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:18:35.053965896 +0000 UTC m=+669.761307724 I0407 00:18:35.075567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:35.076308 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:18:35.076300505 +0000 UTC m=+669.783642333 I0407 00:19:18.876782 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:19:18.876764723 +0000 UTC m=+713.584106561 I0407 00:19:18.877259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:19:18.877314 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:19:18.87731093 +0000 UTC m=+713.584652748 I0407 00:19:18.897459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:18.897530 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:19:18.897523747 +0000 UTC m=+713.604865575 I0407 00:19:19.017178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:19.048794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ltqnl" condition "Approved" to 2026-04-07 00:19:19.048781686 +0000 UTC m=+713.756123514 I0407 00:19:19.076715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ltqnl" condition "Ready" to 2026-04-07 00:19:19.076702444 +0000 UTC m=+713.784044262 I0407 00:19:19.109168 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:19:19.109153111 +0000 UTC m=+713.816494949 I0407 00:19:19.133840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:19.135383 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:19:19.135372589 +0000 UTC m=+713.842714447 I0407 00:19:19.151388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"