I0528 15:17:07.518847       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0528 15:17:07.518976       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0528 15:17:07.519147       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0528 15:17:07.524359       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0528 15:17:07.524871       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0528 15:17:07.524878       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0528 15:17:07.524924       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0528 15:17:07.528589       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0528 15:17:07.707116       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0528 15:17:07.711256       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0528 15:17:07.715611       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0528 15:17:07.718141       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0528 15:17:07.718318       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0528 15:17:07.720771       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0528 15:17:07.723212       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0528 15:17:07.725431       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0528 15:17:07.725568       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0528 15:17:07.727949       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0528 15:17:07.732248       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0528 15:17:07.734225       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0528 15:17:07.735953       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0528 15:17:07.737641       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0528 15:17:07.739359       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0528 15:17:07.740964       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0528 15:17:07.741020       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0528 15:17:07.742974       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0528 15:17:07.745221       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0528 15:17:07.746983       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0528 15:17:07.749764       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0528 15:17:07.749786       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0528 15:17:07.749794       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0528 15:17:07.750793       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0528 15:17:07.754927       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0528 15:17:07.757645       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.757929       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.758577       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.759118       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.809151       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.809173       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.810610       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.838412       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.841676       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:07.841829       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 15:17:26.977669       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-28 15:17:26.977648559 +0000 UTC m=+19.491778678
I0528 15:17:27.677613       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-28 15:17:27.677602473 +0000 UTC m=+20.191732602
I0528 15:17:27.678035       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:17:27.678057       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 15:17:27.678052743 +0000 UTC m=+20.192182882
E0528 15:17:27.692725       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 15:17:27.692777       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-28 15:17:27.692772424 +0000 UTC m=+20.206902543
E0528 15:17:27.692796       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 15:17:27.697507       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:27.697577       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:17:27.697598       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 15:17:27.697592241 +0000 UTC m=+20.211722370
E0528 15:17:27.707010       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0528 15:17:27.707387       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 15:17:27.707450       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 15:17:27.707507       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0528 15:17:27.736993       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d6cvm" condition "Approved" to 2026-05-28 15:17:27.736983523 +0000 UTC m=+20.251113652
I0528 15:17:27.752230       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d6cvm" condition "Ready" to 2026-05-28 15:17:27.752183944 +0000 UTC m=+20.266314063
I0528 15:17:27.775739       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:17:27.775726232 +0000 UTC m=+20.289856351
I0528 15:17:27.795245       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:32.708101       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:17:32.708076329 +0000 UTC m=+25.222206478
I0528 15:17:57.737563       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:17:57.737596       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-28 15:17:57.73758893 +0000 UTC m=+50.251719059
I0528 15:17:57.738058       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 15:17:57.738052399 +0000 UTC m=+50.252182538
I0528 15:17:57.754993       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-28 15:17:57.754978339 +0000 UTC m=+50.269108478
I0528 15:17:57.759724       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:57.760808       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 15:17:57.760797532 +0000 UTC m=+50.274927671
I0528 15:17:58.175944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:58.208236       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rbdt7" condition "Approved" to 2026-05-28 15:17:58.208226202 +0000 UTC m=+50.722356341
I0528 15:17:58.238946       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rbdt7" condition "Ready" to 2026-05-28 15:17:58.238931748 +0000 UTC m=+50.753061877
I0528 15:17:58.271626       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:17:58.271612162 +0000 UTC m=+50.785742321
I0528 15:17:58.294554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:58.294904       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:17:58.294895615 +0000 UTC m=+50.809025754
I0528 15:17:58.317475       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:17:58.319128       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:22:42.535011       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-05-28 15:22:42.534962668 +0000 UTC m=+335.049092797
I0528 15:22:42.535514       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:22:42.535589       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-05-28 15:22:42.535581089 +0000 UTC m=+335.049711218
I0528 15:22:42.552308       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:22:42.552514       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:22:42.552539       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-05-28 15:22:42.552531822 +0000 UTC m=+335.066661961
I0528 15:22:42.849310       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:22:42.859239       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-qd8kf" condition "Approved" to 2026-05-28 15:22:42.859212887 +0000 UTC m=+335.373343036
I0528 15:22:42.889318       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-qd8kf" condition "Ready" to 2026-05-28 15:22:42.889307828 +0000 UTC m=+335.403437957
I0528 15:22:42.916758       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:22:42.916746183 +0000 UTC m=+335.430876312
I0528 15:22:42.937552       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:22:42.937829       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:22:42.937823137 +0000 UTC m=+335.451953376
I0528 15:22:42.956228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:22:42.956536       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:22:42.956527221 +0000 UTC m=+335.470657350
I0528 15:23:46.704418       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:23:46.704417       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 15:23:46.704368845 +0000 UTC m=+399.218499024
I0528 15:23:46.704455       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 15:23:46.704446806 +0000 UTC m=+399.218576965
I0528 15:23:46.719119       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:23:46.719272       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 15:23:46.719263552 +0000 UTC m=+399.233393681
E0528 15:23:46.723171       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 15:23:46.723210       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-28 15:23:46.723199947 +0000 UTC m=+399.237330076
E0528 15:23:46.723666       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 15:23:46.731713       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0528 15:23:46.732061       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 15:23:46.732104       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 15:23:46.732184       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0528 15:23:46.739492       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:23:46.758638       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-56pgh" condition "Approved" to 2026-05-28 15:23:46.758628653 +0000 UTC m=+399.272758782
I0528 15:23:46.770770       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-56pgh" condition "Ready" to 2026-05-28 15:23:46.770758954 +0000 UTC m=+399.284889073
I0528 15:23:46.791241       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:23:46.791223922 +0000 UTC m=+399.305354081
I0528 15:23:46.806335       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:23:46.806593       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:23:46.806586257 +0000 UTC m=+399.320716386
I0528 15:23:46.821258       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:23:46.821618       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:23:46.821610135 +0000 UTC m=+399.335740264
I0528 15:23:51.732437       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:23:51.732423668 +0000 UTC m=+404.246553827
I0528 15:24:31.024408       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 15:24:31.024368904 +0000 UTC m=+443.538499043
I0528 15:24:31.041057       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.041246       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 15:24:31.041238398 +0000 UTC m=+443.555368517
I0528 15:24:31.043897       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-28 15:24:31.043891801 +0000 UTC m=+443.558021920
I0528 15:24:31.044615       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.044677       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 15:24:31.044669053 +0000 UTC m=+443.558799172
I0528 15:24:31.045796       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 15:24:31.045789742 +0000 UTC m=+443.559919871
I0528 15:24:31.054788       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.059869       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 15:24:31.05985596 +0000 UTC m=+443.573986089
I0528 15:24:31.080528       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.080589       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.080609       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 15:24:31.080603936 +0000 UTC m=+443.594734065
I0528 15:24:31.080938       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.080973       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 15:24:31.080970221 +0000 UTC m=+443.595100330
I0528 15:24:31.091957       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.092014       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.092033       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 15:24:31.092028771 +0000 UTC m=+443.606158890
I0528 15:24:31.250536       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.252642       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.262389       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p66zk" condition "Approved" to 2026-05-28 15:24:31.262378351 +0000 UTC m=+443.776508480
I0528 15:24:31.264177       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjv5h" condition "Approved" to 2026-05-28 15:24:31.26416374 +0000 UTC m=+443.778293899
I0528 15:24:31.281314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjv5h" condition "Ready" to 2026-05-28 15:24:31.281302338 +0000 UTC m=+443.795432477
I0528 15:24:31.286834       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p66zk" condition "Ready" to 2026-05-28 15:24:31.286823697 +0000 UTC m=+443.800953826
I0528 15:24:31.410213       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.413688       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.413711       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 15:24:31.413706202 +0000 UTC m=+443.927836311
I0528 15:24:31.415456       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:31.415557       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 15:24:31.415487092 +0000 UTC m=+443.929617221
I0528 15:24:31.421008       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:31.421001101 +0000 UTC m=+443.935131220
I0528 15:24:31.421670       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:31.421664192 +0000 UTC m=+443.935794311
I0528 15:24:31.613215       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.613532       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:31.61352343 +0000 UTC m=+444.127653549
I0528 15:24:31.665846       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.666413       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:31.666400866 +0000 UTC m=+444.180531025
I0528 15:24:31.716043       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:31.815035       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0528 15:24:32.163798       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-57lcz\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls"
I0528 15:24:32.269757       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hm5fd" condition "Approved" to 2026-05-28 15:24:32.269743811 +0000 UTC m=+444.783873940
E0528 15:24:32.361927       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-pm9xl\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0528 15:24:32.425487       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6cb92" condition "Approved" to 2026-05-28 15:24:32.425468052 +0000 UTC m=+444.939598211
I0528 15:24:32.574462       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hm5fd" condition "Ready" to 2026-05-28 15:24:32.574445785 +0000 UTC m=+445.088575934
I0528 15:24:32.919344       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d8846" condition "Approved" to 2026-05-28 15:24:32.919326021 +0000 UTC m=+445.433456170
I0528 15:24:32.975358       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6cb92" condition "Ready" to 2026-05-28 15:24:32.975343468 +0000 UTC m=+445.489473627
I0528 15:24:33.525794       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d8846" condition "Ready" to 2026-05-28 15:24:33.525784719 +0000 UTC m=+446.039914838
E0528 15:24:34.007942       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-7pfpp\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls"
I0528 15:24:34.264718       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:34.415086       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:34.466461       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-d8846" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-jp2nt" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0528 15:24:34.915491       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:34.965850       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:35.123439       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kv678" condition "Approved" to 2026-05-28 15:24:35.123406205 +0000 UTC m=+447.637536354
I0528 15:24:35.626931       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kv678" condition "Ready" to 2026-05-28 15:24:35.626912341 +0000 UTC m=+448.141042470
I0528 15:24:35.865101       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:35.918463       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:35.918440897 +0000 UTC m=+448.432571056
I0528 15:24:36.015188       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:36.015837       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:36.015825622 +0000 UTC m=+448.529955771
I0528 15:24:36.268861       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:36.317025       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:43.314789       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" condition "Ready" to 2026-05-28 15:24:43.31477007 +0000 UTC m=+455.828900219
I0528 15:24:43.315764       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:43.315824       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" condition "Issuing" to 2026-05-28 15:24:43.315816167 +0000 UTC m=+455.829946316
I0528 15:24:43.340751       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d55fp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:43.340906       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:43.340963       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" condition "Issuing" to 2026-05-28 15:24:43.340955843 +0000 UTC m=+455.855085972
I0528 15:24:43.549127       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d55fp-q7m64" condition "Approved" to 2026-05-28 15:24:43.54911416 +0000 UTC m=+456.063244279
I0528 15:24:43.573691       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d55fp-q7m64" condition "Ready" to 2026-05-28 15:24:43.573682117 +0000 UTC m=+456.087812236
I0528 15:24:43.609518       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:43.609493574 +0000 UTC m=+456.123623703
I0528 15:24:43.629060       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d55fp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:43.629560       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:43.629549728 +0000 UTC m=+456.143679857
I0528 15:24:43.652941       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d55fp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d55fp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:56.673024       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:24:56.673023       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 15:24:56.672978465 +0000 UTC m=+469.187108614
I0528 15:24:56.673069       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 15:24:56.673058456 +0000 UTC m=+469.187188615
I0528 15:24:56.691248       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:56.691331       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 15:24:56.691323729 +0000 UTC m=+469.205453848
I0528 15:24:56.983704       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:57.022699       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h56w4" condition "Approved" to 2026-05-28 15:24:57.02268565 +0000 UTC m=+469.536815789
I0528 15:24:57.046886       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h56w4" condition "Ready" to 2026-05-28 15:24:57.046870618 +0000 UTC m=+469.561000777
I0528 15:24:57.077124       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:57.077107454 +0000 UTC m=+469.591237613
I0528 15:24:57.096588       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:24:57.096847       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:24:57.09683983 +0000 UTC m=+469.610969939
I0528 15:24:57.120547       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:28:21.801160       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:28:21.801224       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 15:28:21.80121706 +0000 UTC m=+674.315347189
I0528 15:28:21.801853       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 15:28:21.80184595 +0000 UTC m=+674.315976089
I0528 15:28:21.824745       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:28:21.824837       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 15:28:21.824828966 +0000 UTC m=+674.338959085
I0528 15:28:22.078798       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:28:22.121287       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2t5rz" condition "Approved" to 2026-05-28 15:28:22.121261168 +0000 UTC m=+674.635391287
I0528 15:28:22.152283       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2t5rz" condition "Ready" to 2026-05-28 15:28:22.152275609 +0000 UTC m=+674.666405728
I0528 15:28:22.194580       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:28:22.194556135 +0000 UTC m=+674.708686254
I0528 15:28:22.219005       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:28:22.219493       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:28:22.219486152 +0000 UTC m=+674.733616271
I0528 15:28:22.241003       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:28:22.241298       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:28:22.241287251 +0000 UTC m=+674.755417400
I0528 15:29:04.134451       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 15:29:04.134432504 +0000 UTC m=+716.648562663
I0528 15:29:04.134526       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:29:04.134552       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 15:29:04.134544889 +0000 UTC m=+716.648675008
I0528 15:29:04.159722       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 15:29:04.159792       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 15:29:04.162483       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 15:29:04.162475651 +0000 UTC m=+716.676605790
I0528 15:29:04.470033       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zfhhq" condition "Approved" to 2026-05-28 15:29:04.470024466 +0000 UTC m=+716.984154595
I0528 15:29:04.489304       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zfhhq" condition "Ready" to 2026-05-28 15:29:04.489283871 +0000 UTC m=+717.003413980
I0528 15:29:04.523159       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 15:29:04.523148437 +0000 UTC m=+717.037278546
I0528 15:29:04.549931       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"