I0420 20:51:54.615685 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 20:51:54.615938 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 20:51:54.616083 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 20:51:54.619585 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 20:51:54.619961 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 20:51:54.620629 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 20:51:54.620644 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 20:51:54.622888 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 20:51:54.637064 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 20:51:54.637351 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 20:51:54.637376 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 20:51:54.640561 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 20:51:54.644557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 20:51:54.648553 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 20:51:54.648589 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 20:51:54.648690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 20:51:54.652304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 20:51:54.654662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 20:51:54.656569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 20:51:54.658509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 20:51:54.658646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 20:51:54.660693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 20:51:54.662433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 20:51:54.667160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 20:51:54.669519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 20:51:54.671699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 20:51:54.674067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 20:51:54.676254 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 20:51:54.676363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 20:51:54.677941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 20:51:54.679696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 20:51:54.681338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 20:51:54.683328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 20:51:54.691384 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.691453 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.691497 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.691703 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.692032 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.692616 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.693306 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.693634 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.693709 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:51:54.770779 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:52:07.513790 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 20:52:07.513754747 +0000 UTC m=+12.928937282 I0420 20:52:08.246589 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 20:52:08.246574646 +0000 UTC m=+13.661757141 I0420 20:52:08.246773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:52:08.246962 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:52:08.246838848 +0000 UTC m=+13.662021373 E0420 20:52:08.259371 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:52:08.259414 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 20:52:08.259407791 +0000 UTC m=+13.674590276 E0420 20:52:08.259434 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:52:08.266452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:08.267067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:52:08.267102 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:52:08.26709276 +0000 UTC m=+13.682275285 E0420 20:52:08.267791 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 20:52:08.267858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:52:08.267885 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:52:08.267915 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 20:52:08.304153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pgv92" condition "Approved" to 2026-04-20 20:52:08.304141888 +0000 UTC m=+13.719324383 I0420 20:52:08.304533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:08.316254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pgv92" condition "Ready" to 2026-04-20 20:52:08.316243165 +0000 UTC m=+13.731425650 I0420 20:52:08.351968 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:08.351959093 +0000 UTC m=+13.767141568 I0420 20:52:08.389932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:08.390191 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:08.390185946 +0000 UTC m=+13.805368421 I0420 20:52:08.398251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:08.406459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:13.268568 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:13.268555958 +0000 UTC m=+18.683738453 I0420 20:52:35.624896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:52:35.624930 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 20:52:35.62490683 +0000 UTC m=+41.040089325 I0420 20:52:35.624933 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 20:52:35.62492759 +0000 UTC m=+41.040110085 I0420 20:52:35.651759 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 20:52:35.65174896 +0000 UTC m=+41.066931445 I0420 20:52:35.662659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:35.662844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:52:35.662925 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 20:52:35.662889261 +0000 UTC m=+41.078071756 I0420 20:52:35.861139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:35.868754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bln5n" condition "Approved" to 2026-04-20 20:52:35.86874385 +0000 UTC m=+41.283926345 I0420 20:52:35.902170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bln5n" condition "Ready" to 2026-04-20 20:52:35.902159273 +0000 UTC m=+41.317341768 I0420 20:52:35.933507 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:35.933488622 +0000 UTC m=+41.348671137 I0420 20:52:35.957404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:35.957816 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:35.957795558 +0000 UTC m=+41.372978063 I0420 20:52:35.974080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:52:35.974343 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:52:35.97433659 +0000 UTC m=+41.389519095 I0420 20:56:38.189228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:56:38.189283 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-04-20 20:56:38.189251868 +0000 UTC m=+283.604434363 I0420 20:56:38.189579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-20 20:56:38.189558666 +0000 UTC m=+283.604741181 I0420 20:56:38.208252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.208348 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-20 20:56:38.20833967 +0000 UTC m=+283.623522165 I0420 20:56:38.528212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.554143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-787vd" condition "Approved" to 2026-04-20 20:56:38.554131159 +0000 UTC m=+283.969313664 I0420 20:56:38.588819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-787vd" condition "Ready" to 2026-04-20 20:56:38.588793193 +0000 UTC m=+284.003975688 I0420 20:56:38.616033 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:56:38.616017893 +0000 UTC m=+284.031200408 I0420 20:56:38.643261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.643844 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:56:38.64383352 +0000 UTC m=+284.059016035 I0420 20:56:38.648467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.656774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.658200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:56:38.658366 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:56:38.658359817 +0000 UTC m=+284.073542302 I0420 20:57:40.967823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:57:40.967864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 20:57:40.967840243 +0000 UTC m=+346.383022738 I0420 20:57:40.967893 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 20:57:40.967882183 +0000 UTC m=+346.383064698 I0420 20:57:40.982110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:40.982214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0420 20:57:40.982256 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:57:40.982236 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 20:57:40.982230271 +0000 UTC m=+346.397412766 I0420 20:57:40.982298 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 20:57:40.982289992 +0000 UTC m=+346.397472477 E0420 20:57:40.982341 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:57:40.993559 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 20:57:40.994143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:57:40.994889 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:57:40.995702 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 20:57:41.018203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4mvxn" condition "Approved" to 2026-04-20 20:57:41.018187874 +0000 UTC m=+346.433370369 I0420 20:57:41.018277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:41.029534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4mvxn" condition "Ready" to 2026-04-20 20:57:41.029521343 +0000 UTC m=+346.444703838 I0420 20:57:41.051510 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:41.051488058 +0000 UTC m=+346.466670543 I0420 20:57:41.068177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:41.068563 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:41.068554097 +0000 UTC m=+346.483736592 I0420 20:57:41.085771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:45.994024 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:45.994010959 +0000 UTC m=+351.409193474 I0420 20:58:24.253152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:24.253194 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 20:58:24.253178719 +0000 UTC m=+389.668361194 I0420 20:58:24.253394 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 20:58:24.253390244 +0000 UTC m=+389.668572719 I0420 20:58:24.260165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:24.263043 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 20:58:24.26303211 +0000 UTC m=+389.678214595 I0420 20:58:24.262535 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 20:58:24.262526217 +0000 UTC m=+389.677708692 I0420 20:58:24.277226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:24.277254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 20:58:24.277248434 +0000 UTC m=+389.692430919 I0420 20:58:24.277446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 20:58:24.277442439 +0000 UTC m=+389.692624924 I0420 20:58:24.301036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.301149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:24.301282 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 20:58:24.301274098 +0000 UTC m=+389.716456633 I0420 20:58:24.301667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.301759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:24.301837 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 20:58:24.301831773 +0000 UTC m=+389.717014278 I0420 20:58:24.302155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.302309 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 20:58:24.302301336 +0000 UTC m=+389.717483831 I0420 20:58:24.535876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.548822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.550337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9fxhx" condition "Approved" to 2026-04-20 20:58:24.550328253 +0000 UTC m=+389.965510738 I0420 20:58:24.558351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.560982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mbzk6" condition "Approved" to 2026-04-20 20:58:24.560974037 +0000 UTC m=+389.976156532 I0420 20:58:24.580697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9fxhx" condition "Ready" to 2026-04-20 20:58:24.580688022 +0000 UTC m=+389.995870507 I0420 20:58:24.581086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mbzk6" condition "Ready" to 2026-04-20 20:58:24.581077083 +0000 UTC m=+389.996259568 I0420 20:58:24.616876 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:24.616863822 +0000 UTC m=+390.032046297 I0420 20:58:24.623104 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:24.623093084 +0000 UTC m=+390.038275579 I0420 20:58:24.641225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.641567 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:24.641560385 +0000 UTC m=+390.056742880 I0420 20:58:24.645445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:24.646142 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:24.646129001 +0000 UTC m=+390.061311496 I0420 20:58:24.841961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:25.060613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:25.447736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kpv9l" condition "Approved" to 2026-04-20 20:58:25.447725838 +0000 UTC m=+390.862908333 I0420 20:58:25.636766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kpv9l" condition "Ready" to 2026-04-20 20:58:25.636757191 +0000 UTC m=+391.051939686 I0420 20:58:26.038514 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-kpv9l" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-75mbw" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 20:58:26.199248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cdrhl" condition "Approved" to 2026-04-20 20:58:26.19923697 +0000 UTC m=+391.614419465 I0420 20:58:26.500158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cdrhl" condition "Ready" to 2026-04-20 20:58:26.500136276 +0000 UTC m=+391.915318791 I0420 20:58:26.743762 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:26.743743536 +0000 UTC m=+392.158926051 I0420 20:58:26.841948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:26.842374 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:26.842368161 +0000 UTC m=+392.257550646 I0420 20:58:27.041872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.588645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:31.588669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Ready" to 2026-04-20 20:58:31.588653071 +0000 UTC m=+397.003835556 I0420 20:58:31.588688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Issuing" to 2026-04-20 20:58:31.588677362 +0000 UTC m=+397.003859887 I0420 20:58:31.604898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.605120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:31.605156 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Issuing" to 2026-04-20 20:58:31.605147109 +0000 UTC m=+397.020329624 I0420 20:58:31.872661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.874637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hjl6k-74bfg" condition "Approved" to 2026-04-20 20:58:31.874623704 +0000 UTC m=+397.289806179 I0420 20:58:31.903885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hjl6k-74bfg" condition "Ready" to 2026-04-20 20:58:31.903874031 +0000 UTC m=+397.319056526 I0420 20:58:31.936425 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:31.936411645 +0000 UTC m=+397.351594140 I0420 20:58:31.959599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.959883 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:31.959875965 +0000 UTC m=+397.375058460 I0420 20:58:31.972627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.983882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:31.984298 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hjl6k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:31.984289873 +0000 UTC m=+397.399472368 I0420 20:58:43.880466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:58:43.880535 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 20:58:43.880515533 +0000 UTC m=+409.295698048 I0420 20:58:43.881239 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 20:58:43.881218054 +0000 UTC m=+409.296400559 I0420 20:58:43.894827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:43.894899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 20:58:43.89489158 +0000 UTC m=+409.310074075 I0420 20:58:44.149717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:44.183066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fxqpw" condition "Approved" to 2026-04-20 20:58:44.183051705 +0000 UTC m=+409.598234190 I0420 20:58:44.203861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fxqpw" condition "Ready" to 2026-04-20 20:58:44.203851416 +0000 UTC m=+409.619033901 I0420 20:58:44.230535 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:44.230505091 +0000 UTC m=+409.645687576 I0420 20:58:44.255212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:58:44.255596 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:58:44.255588056 +0000 UTC m=+409.670770541 I0420 20:58:44.274786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:01:55.138249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:01:55.138295 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:01:55.138285125 +0000 UTC m=+600.553467650 I0420 21:01:55.138682 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:01:55.138667604 +0000 UTC m=+600.553850119 I0420 21:01:55.157644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:01:55.157776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:01:55.157860 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:01:55.157852856 +0000 UTC m=+600.573035351 I0420 21:01:55.410604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47tdp" condition "Approved" to 2026-04-20 21:01:55.410590259 +0000 UTC m=+600.825772764 I0420 21:01:55.429282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47tdp" condition "Ready" to 2026-04-20 21:01:55.429272317 +0000 UTC m=+600.844454812 I0420 21:01:55.456143 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:01:55.456130208 +0000 UTC m=+600.871312703 I0420 21:01:55.485497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:01:55.485801 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:01:55.485795285 +0000 UTC m=+600.900977790 I0420 21:01:55.514023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:34.244913 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 21:02:34.244894867 +0000 UTC m=+639.660077362 I0420 21:02:34.245257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:34.245301 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 21:02:34.245296517 +0000 UTC m=+639.660479012 I0420 21:02:34.266512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:34.266566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:34.266580 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 21:02:34.266574868 +0000 UTC m=+639.681757363 I0420 21:02:34.534590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fkvt8" condition "Approved" to 2026-04-20 21:02:34.534579646 +0000 UTC m=+639.949762131 I0420 21:02:34.554693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fkvt8" condition "Ready" to 2026-04-20 21:02:34.554681948 +0000 UTC m=+639.969864443 I0420 21:02:34.577813 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:34.577799129 +0000 UTC m=+639.992981624 I0420 21:02:34.599917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:34.600316 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:34.60030861 +0000 UTC m=+640.015491105 I0420 21:02:34.620147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:34.625862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"