I0421 18:09:26.374795 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 18:09:26.374895 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 18:09:26.374950 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 18:09:26.377381 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 18:09:26.377651 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 18:09:26.377848 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 18:09:26.377857 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 18:09:26.379654 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 18:09:26.398191 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 18:09:26.401580 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 18:09:26.401636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 18:09:26.407658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 18:09:26.409922 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 18:09:26.409950 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 18:09:26.410014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 18:09:26.412334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 18:09:26.414876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 18:09:26.417230 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 18:09:26.417323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 18:09:26.419799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 18:09:26.426393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 18:09:26.430782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 18:09:26.433526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 18:09:26.435445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 18:09:26.437120 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 18:09:26.437304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 18:09:26.439226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 18:09:26.441220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 18:09:26.443576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 18:09:26.446425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 18:09:26.450909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 18:09:26.454544 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 18:09:26.454802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 18:09:26.456864 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.457269 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.457733 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.458015 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.458146 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.458145 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.458689 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.458883 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.459178 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:26.537883 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:09:39.255449 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 18:09:39.255436395 +0000 UTC m=+12.911863308 I0421 18:09:39.994847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:09:39.994930 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 18:09:39.994922583 +0000 UTC m=+13.651349496 I0421 18:09:39.995633 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 18:09:39.995615595 +0000 UTC m=+13.652042538 E0421 18:09:40.008567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:09:40.009496 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 18:09:40.009489457 +0000 UTC m=+13.665916360 E0421 18:09:40.009546 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:09:40.010616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:09:40.010697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:09:40.010724 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 18:09:40.010715907 +0000 UTC m=+13.667142820 E0421 18:09:40.019838 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 18:09:40.019961 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:09:40.020003 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:09:40.020043 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 18:09:40.054696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6qssd" condition "Approved" to 2026-04-21 18:09:40.054687468 +0000 UTC m=+13.711114371 I0421 18:09:40.067712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6qssd" condition "Ready" to 2026-04-21 18:09:40.067699514 +0000 UTC m=+13.724126417 I0421 18:09:40.087882 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:09:40.087863173 +0000 UTC m=+13.744290086 I0421 18:09:40.102479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:09:40.102897 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:09:40.102890342 +0000 UTC m=+13.759317255 I0421 18:09:40.123335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:09:45.020577 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:09:45.02056314 +0000 UTC m=+18.676990083 I0421 18:10:08.497054 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 18:10:08.497032656 +0000 UTC m=+42.153459559 I0421 18:10:08.497086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:08.497210 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 18:10:08.497118577 +0000 UTC m=+42.153545530 I0421 18:10:08.511039 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 18:10:08.511027349 +0000 UTC m=+42.167454252 I0421 18:10:08.537286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:08.537340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:08.537354 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 18:10:08.537349331 +0000 UTC m=+42.193776234 I0421 18:10:08.723951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:08.735403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ndzgk" condition "Approved" to 2026-04-21 18:10:08.735393082 +0000 UTC m=+42.391819995 I0421 18:10:08.770789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ndzgk" condition "Ready" to 2026-04-21 18:10:08.770773316 +0000 UTC m=+42.427200259 I0421 18:10:08.805462 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:08.805445828 +0000 UTC m=+42.461872771 I0421 18:10:08.832041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:08.832320 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:08.832313538 +0000 UTC m=+42.488740441 I0421 18:10:08.856541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:08.857032 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:08.857018656 +0000 UTC m=+42.513445599 I0421 18:14:21.594541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:14:21.594614 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Issuing" to 2026-04-21 18:14:21.594605246 +0000 UTC m=+295.251032179 I0421 18:14:21.595186 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready" to 2026-04-21 18:14:21.595178188 +0000 UTC m=+295.251605121 I0421 18:14:21.611952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:21.612009 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready" to 2026-04-21 18:14:21.612002772 +0000 UTC m=+295.268429675 I0421 18:14:21.800079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:21.825096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-p9q46" condition "Approved" to 2026-04-21 18:14:21.825085451 +0000 UTC m=+295.481512364 I0421 18:14:21.850839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-p9q46" condition "Ready" to 2026-04-21 18:14:21.850827292 +0000 UTC m=+295.507254205 I0421 18:14:21.879272 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:21.879260004 +0000 UTC m=+295.535686907 I0421 18:14:21.900024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:21.900266 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:21.900260778 +0000 UTC m=+295.556687681 I0421 18:14:21.904008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:21.922069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:21.922416 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:21.922408241 +0000 UTC m=+295.578835164 I0421 18:15:25.687299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 18:15:25.687275749 +0000 UTC m=+359.343702662 I0421 18:15:25.687558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:25.687643 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 18:15:25.687630075 +0000 UTC m=+359.344056978 E0421 18:15:25.701629 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:15:25.701684 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 18:15:25.701664858 +0000 UTC m=+359.358091771 E0421 18:15:25.701741 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:15:25.705885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:25.706054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:25.706091 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 18:15:25.706078327 +0000 UTC m=+359.362505260 E0421 18:15:25.712625 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 18:15:25.712879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:15:25.713565 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:15:25.713763 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 18:15:25.752925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8gc4b" condition "Approved" to 2026-04-21 18:15:25.752908711 +0000 UTC m=+359.409335654 I0421 18:15:25.753300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:25.768267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8gc4b" condition "Ready" to 2026-04-21 18:15:25.768251405 +0000 UTC m=+359.424678308 I0421 18:15:25.794142 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:25.794124046 +0000 UTC m=+359.450550989 I0421 18:15:25.812329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:25.812712 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:25.812705041 +0000 UTC m=+359.469131954 I0421 18:15:25.827210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:25.827552 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:25.827542247 +0000 UTC m=+359.483969170 I0421 18:15:25.831267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:30.713576 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:30.713561817 +0000 UTC m=+364.369988750 I0421 18:16:09.998006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:09.998036 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 18:16:09.998030144 +0000 UTC m=+403.654457037 I0421 18:16:09.999401 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 18:16:09.999391095 +0000 UTC m=+403.655817998 I0421 18:16:10.012209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:10.012248 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 18:16:10.012239732 +0000 UTC m=+403.668666645 I0421 18:16:10.012787 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 18:16:10.012780979 +0000 UTC m=+403.669207902 I0421 18:16:10.027063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:10.027093 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 18:16:10.027086389 +0000 UTC m=+403.683513292 I0421 18:16:10.027202 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 18:16:10.02719131 +0000 UTC m=+403.683618203 I0421 18:16:10.061853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.061918 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 18:16:10.061912546 +0000 UTC m=+403.718339439 I0421 18:16:10.073472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.073757 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 18:16:10.073749259 +0000 UTC m=+403.730176182 I0421 18:16:10.075928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.076031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:10.076054 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 18:16:10.076049503 +0000 UTC m=+403.732476416 I0421 18:16:10.233272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.307350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2gmjm" condition "Approved" to 2026-04-21 18:16:10.307340397 +0000 UTC m=+403.963767300 I0421 18:16:10.366374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.395802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2gmjm" condition "Ready" to 2026-04-21 18:16:10.395789167 +0000 UTC m=+404.052216100 I0421 18:16:10.444775 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:10.444764852 +0000 UTC m=+404.101191765 I0421 18:16:10.447223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.458332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wpqxt" condition "Approved" to 2026-04-21 18:16:10.45831969 +0000 UTC m=+404.114746603 I0421 18:16:10.473074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.476457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wpqxt" condition "Ready" to 2026-04-21 18:16:10.476445594 +0000 UTC m=+404.132872507 I0421 18:16:10.495434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.550241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:10.550270 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 18:16:10.55026459 +0000 UTC m=+404.206691493 I0421 18:16:10.552092 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:10.552088447 +0000 UTC m=+404.208515350 I0421 18:16:10.790124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:10.790555 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:10.790546676 +0000 UTC m=+404.446973589 I0421 18:16:10.949173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4ndjz" condition "Approved" to 2026-04-21 18:16:10.94915734 +0000 UTC m=+404.605584283 I0421 18:16:11.035949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:11.114002 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:11.113990252 +0000 UTC m=+404.770417155 I0421 18:16:11.143422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:11.249140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4ndjz" condition "Ready" to 2026-04-21 18:16:11.24912402 +0000 UTC m=+404.905550933 I0421 18:16:11.689442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:11.948187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4rvx9" condition "Approved" to 2026-04-21 18:16:11.94817132 +0000 UTC m=+405.604598233 E0421 18:16:11.983924 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2gbj5\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0421 18:16:12.348740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4rvx9" condition "Ready" to 2026-04-21 18:16:12.348724245 +0000 UTC m=+406.005151188 I0421 18:16:12.688864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:12.838555 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-4rvx9" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-dbwbj" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0421 18:16:13.188121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:13.244792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gpmz9" condition "Approved" to 2026-04-21 18:16:13.244780369 +0000 UTC m=+406.901207272 I0421 18:16:13.545448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gpmz9" condition "Ready" to 2026-04-21 18:16:13.545436584 +0000 UTC m=+407.201863497 I0421 18:16:13.915679 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:13.915666409 +0000 UTC m=+407.572093322 I0421 18:16:13.944310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:13.944515 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:13.944509437 +0000 UTC m=+407.600936350 I0421 18:16:14.185889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:14.239149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:18.607682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" condition "Ready" to 2026-04-21 18:16:18.607672001 +0000 UTC m=+412.264098904 I0421 18:16:18.608010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:18.608029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" condition "Issuing" to 2026-04-21 18:16:18.608025896 +0000 UTC m=+412.264452799 I0421 18:16:18.633373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:18.633535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:18.633551 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" condition "Issuing" to 2026-04-21 18:16:18.633546343 +0000 UTC m=+412.289973246 I0421 18:16:18.816974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:18.831203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4vvk9-nbcbj" condition "Approved" to 2026-04-21 18:16:18.831186239 +0000 UTC m=+412.487613182 I0421 18:16:18.871135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4vvk9-nbcbj" condition "Ready" to 2026-04-21 18:16:18.871121195 +0000 UTC m=+412.527548118 I0421 18:16:18.910588 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:18.910576283 +0000 UTC m=+412.567003186 I0421 18:16:19.058281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:19.058721 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:19.058711376 +0000 UTC m=+412.715138319 I0421 18:16:19.150426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4vvk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:31.504097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 18:16:31.504081437 +0000 UTC m=+425.160508340 I0421 18:16:31.504216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:31.504253 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 18:16:31.504245789 +0000 UTC m=+425.160672702 I0421 18:16:31.526810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:31.526886 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 18:16:31.526880108 +0000 UTC m=+425.183307011 I0421 18:16:31.778485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:31.810637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g8q5c" condition "Approved" to 2026-04-21 18:16:31.810622527 +0000 UTC m=+425.467049430 I0421 18:16:31.834741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g8q5c" condition "Ready" to 2026-04-21 18:16:31.834728937 +0000 UTC m=+425.491155850 I0421 18:16:31.878307 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:31.878294972 +0000 UTC m=+425.534721915 I0421 18:16:31.897743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:45.763178 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 18:19:45.763164309 +0000 UTC m=+619.419591212 I0421 18:19:45.763187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:45.763258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 18:19:45.76324796 +0000 UTC m=+619.419674903 I0421 18:19:45.778420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:45.778502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:45.778521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 18:19:45.778514685 +0000 UTC m=+619.434941598 I0421 18:19:46.092522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nntp2" condition "Approved" to 2026-04-21 18:19:46.092507554 +0000 UTC m=+619.748934477 I0421 18:19:46.117324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nntp2" condition "Ready" to 2026-04-21 18:19:46.117314464 +0000 UTC m=+619.773741367 I0421 18:19:46.152157 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:46.152143645 +0000 UTC m=+619.808570558 I0421 18:19:46.167190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:46.167544 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:46.167537681 +0000 UTC m=+619.823964594 I0421 18:19:46.188247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:46.196590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:27.944486 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 18:20:27.944472528 +0000 UTC m=+661.600899461 I0421 18:20:27.945349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:27.945433 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 18:20:27.945387978 +0000 UTC m=+661.601814941 I0421 18:20:27.962741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:27.962797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:27.962830 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 18:20:27.962822426 +0000 UTC m=+661.619249339 I0421 18:20:28.301030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:28.309828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t7mtl" condition "Approved" to 2026-04-21 18:20:28.309817778 +0000 UTC m=+661.966244681 I0421 18:20:28.331163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t7mtl" condition "Ready" to 2026-04-21 18:20:28.331151414 +0000 UTC m=+661.987578327 I0421 18:20:28.354322 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:28.354308359 +0000 UTC m=+662.010735262 I0421 18:20:28.396732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:28.432603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"