I0414 10:46:04.216090 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 10:46:04.216273 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 10:46:04.216704 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 10:46:04.221668 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 10:46:04.222022 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 10:46:04.222098 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 10:46:04.222139 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 10:46:04.224718 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 10:46:04.242066 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 10:46:04.248263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 10:46:04.254653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 10:46:04.257715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 10:46:04.260154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 10:46:04.262449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 10:46:04.264276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 10:46:04.265971 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 10:46:04.265993 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 10:46:04.266136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 10:46:04.270254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 10:46:04.272510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 10:46:04.274308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 10:46:04.276061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 10:46:04.277904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 10:46:04.279639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 10:46:04.281466 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 10:46:04.281580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 10:46:04.283659 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 10:46:04.283700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 10:46:04.285778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 10:46:04.285792 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 10:46:04.285857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 10:46:04.290409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 10:46:04.294820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 10:46:04.299439 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.300705 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.301153 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.316398 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.330662 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.348932 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.376745 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.386165 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.394726 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:04.415341 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 10:46:17.685078 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 10:46:17.685062281 +0000 UTC m=+13.501650140 I0414 10:46:18.356246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:46:18.356490 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 10:46:18.356446338 +0000 UTC m=+14.173034217 I0414 10:46:18.356787 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 10:46:18.356769915 +0000 UTC m=+14.173357784 E0414 10:46:18.373267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 10:46:18.373343 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 10:46:18.373336822 +0000 UTC m=+14.189924661 E0414 10:46:18.373366 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 10:46:18.376121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:18.376287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:46:18.376309 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 10:46:18.376303201 +0000 UTC m=+14.192891040 E0414 10:46:18.384453 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 10:46:18.384604 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 10:46:18.384635 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 10:46:18.384663 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 10:46:18.427550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rjqvt" condition "Approved" to 2026-04-14 10:46:18.427539738 +0000 UTC m=+14.244127577 I0414 10:46:18.439970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rjqvt" condition "Ready" to 2026-04-14 10:46:18.439960218 +0000 UTC m=+14.256548057 I0414 10:46:18.466900 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:18.466888247 +0000 UTC m=+14.283476086 I0414 10:46:18.482523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:18.482852 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:18.48284448 +0000 UTC m=+14.299432309 I0414 10:46:18.497555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:18.497928 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:18.497919002 +0000 UTC m=+14.314506841 I0414 10:46:23.385010 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:23.384990336 +0000 UTC m=+19.201578155 I0414 10:46:48.633278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 10:46:48.63325609 +0000 UTC m=+44.449843929 I0414 10:46:48.633300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:46:48.633593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 10:46:48.633579836 +0000 UTC m=+44.450167675 I0414 10:46:48.693736 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 10:46:48.693720054 +0000 UTC m=+44.510307893 I0414 10:46:48.707106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:48.710120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:46:48.710205 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 10:46:48.710196771 +0000 UTC m=+44.526784600 I0414 10:46:48.979408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ggqnv" condition "Approved" to 2026-04-14 10:46:48.979395162 +0000 UTC m=+44.795983001 I0414 10:46:49.039456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ggqnv" condition "Ready" to 2026-04-14 10:46:49.039441624 +0000 UTC m=+44.856029463 I0414 10:46:49.078721 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:49.078703316 +0000 UTC m=+44.895291155 I0414 10:46:49.105965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:49.106252 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:49.106244773 +0000 UTC m=+44.922832612 I0414 10:46:49.111446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:49.122518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:46:49.122836 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:46:49.122825841 +0000 UTC m=+44.939413680 I0414 10:46:49.124883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:55:30.274442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-04-14 10:55:30.274425342 +0000 UTC m=+566.091013181 I0414 10:55:30.274788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:55:30.274835 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-04-14 10:55:30.274823289 +0000 UTC m=+566.091411158 I0414 10:55:30.295254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:55:30.295428 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-04-14 10:55:30.295416401 +0000 UTC m=+566.112004260 I0414 10:55:30.416733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:55:30.450598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-2xpc6" condition "Approved" to 2026-04-14 10:55:30.450586703 +0000 UTC m=+566.267174542 I0414 10:55:30.474496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-2xpc6" condition "Ready" to 2026-04-14 10:55:30.474485735 +0000 UTC m=+566.291073564 I0414 10:55:30.502254 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:55:30.502233516 +0000 UTC m=+566.318821355 I0414 10:55:30.531853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:55:30.532670 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:55:30.532659846 +0000 UTC m=+566.349247715 I0414 10:55:30.540027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:55:30.551863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:56:37.286259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:56:37.286359 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 10:56:37.286345502 +0000 UTC m=+633.102933371 I0414 10:56:37.286910 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 10:56:37.286876961 +0000 UTC m=+633.103464830 I0414 10:56:37.306603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:56:37.306700 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 10:56:37.306690178 +0000 UTC m=+633.123278007 E0414 10:56:37.309540 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 10:56:37.309592 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 10:56:37.309581089 +0000 UTC m=+633.126168938 E0414 10:56:37.309654 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 10:56:37.322170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0414 10:56:37.324964 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 10:56:37.325050 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 10:56:37.325084 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 10:56:37.325124 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 10:56:37.341342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7kgt2" condition "Approved" to 2026-04-14 10:56:37.341328955 +0000 UTC m=+633.157916794 I0414 10:56:37.396172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7kgt2" condition "Ready" to 2026-04-14 10:56:37.396161805 +0000 UTC m=+633.212749634 I0414 10:56:37.455342 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:56:37.455324191 +0000 UTC m=+633.271912030 I0414 10:56:37.475854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:56:42.326160 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:56:42.326144907 +0000 UTC m=+638.142732766 I0414 10:57:25.630482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:25.630547 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 10:57:25.630539066 +0000 UTC m=+681.447126895 I0414 10:57:25.633333 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 10:57:25.63331959 +0000 UTC m=+681.449907419 I0414 10:57:25.633351 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 10:57:25.633336121 +0000 UTC m=+681.449923960 I0414 10:57:25.633754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:25.633825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 10:57:25.633795863 +0000 UTC m=+681.450383702 I0414 10:57:25.702381 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 10:57:25.702358719 +0000 UTC m=+681.518946558 I0414 10:57:25.702848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:25.702881 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 10:57:25.702875554 +0000 UTC m=+681.519463383 I0414 10:57:25.712169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:25.712240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:25.712482 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 10:57:25.712429685 +0000 UTC m=+681.529017514 I0414 10:57:25.718439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:25.718498 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 10:57:25.718493017 +0000 UTC m=+681.535080846 I0414 10:57:25.736999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:25.737120 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 10:57:25.737111575 +0000 UTC m=+681.553699404 I0414 10:57:25.919173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:25.953406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f7tl" condition "Approved" to 2026-04-14 10:57:25.953396603 +0000 UTC m=+681.769984432 I0414 10:57:25.996446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f7tl" condition "Ready" to 2026-04-14 10:57:25.996437028 +0000 UTC m=+681.813024847 I0414 10:57:26.011824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:26.037046 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:26.037034662 +0000 UTC m=+681.853622491 I0414 10:57:26.070250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:26.070868 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:26.070855039 +0000 UTC m=+681.887442868 I0414 10:57:26.094954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:26.240249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:26.241206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pt8bt" condition "Approved" to 2026-04-14 10:57:26.241199565 +0000 UTC m=+682.057787394 I0414 10:57:26.338629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pt8bt" condition "Ready" to 2026-04-14 10:57:26.338620992 +0000 UTC m=+682.155208811 I0414 10:57:26.399968 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:26.399955963 +0000 UTC m=+682.216543792 I0414 10:57:26.420267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:26.578003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-szh4x" condition "Approved" to 2026-04-14 10:57:26.577976127 +0000 UTC m=+682.394563976 I0414 10:57:26.989610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-szh4x" condition "Ready" to 2026-04-14 10:57:26.98958926 +0000 UTC m=+682.806177129 E0414 10:57:27.165214 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-hsj49\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0414 10:57:27.372033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:27.662633 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-szh4x" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-lj44g" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0414 10:57:27.687325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p5rxk" condition "Approved" to 2026-04-14 10:57:27.687309134 +0000 UTC m=+683.503896973 I0414 10:57:27.732709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p5rxk" condition "Ready" to 2026-04-14 10:57:27.732696442 +0000 UTC m=+683.549284281 I0414 10:57:28.288015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:28.288002338 +0000 UTC m=+684.104590177 I0414 10:57:28.314294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:28.314603 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:28.314598282 +0000 UTC m=+684.131186111 I0414 10:57:28.426065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:28.426563 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:28.426552434 +0000 UTC m=+684.243140303 I0414 10:57:36.082226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Ready" to 2026-04-14 10:57:36.082210909 +0000 UTC m=+691.898798748 I0414 10:57:36.082879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:36.082916 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Issuing" to 2026-04-14 10:57:36.082905861 +0000 UTC m=+691.899493730 I0414 10:57:36.171331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-srqg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:36.171397 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Ready" to 2026-04-14 10:57:36.171391224 +0000 UTC m=+691.987979043 I0414 10:57:36.341210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-srqg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:36.368370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-srqg4-dhw2l" condition "Approved" to 2026-04-14 10:57:36.368359571 +0000 UTC m=+692.184947400 I0414 10:57:36.385705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-srqg4-dhw2l" condition "Ready" to 2026-04-14 10:57:36.385696907 +0000 UTC m=+692.202284736 I0414 10:57:36.434341 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:36.434328545 +0000 UTC m=+692.250916384 I0414 10:57:36.473755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-srqg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:36.474056 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:36.474039483 +0000 UTC m=+692.290627322 I0414 10:57:36.507859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-srqg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:36.508571 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:36.508562417 +0000 UTC m=+692.325150246 I0414 10:57:36.511236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-srqg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-srqg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:54.854692 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 10:57:54.854677126 +0000 UTC m=+710.671264955 I0414 10:57:54.854911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 10:57:54.854947 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 10:57:54.854937588 +0000 UTC m=+710.671525427 I0414 10:57:54.870514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:54.870646 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 10:57:54.870635328 +0000 UTC m=+710.687223187 I0414 10:57:54.992357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:55.033590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vkthk" condition "Approved" to 2026-04-14 10:57:55.033572456 +0000 UTC m=+710.850160325 I0414 10:57:55.052491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vkthk" condition "Ready" to 2026-04-14 10:57:55.05248088 +0000 UTC m=+710.869068719 I0414 10:57:55.083321 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:55.083307981 +0000 UTC m=+710.899895810 I0414 10:57:55.113477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:55.116916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:55.117253 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:55.117246403 +0000 UTC m=+710.933834232 I0414 10:57:55.137011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 10:57:55.137431 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 10:57:55.137420514 +0000 UTC m=+710.954008353 I0414 11:01:07.453922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 11:01:07.453993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 11:01:07.453983064 +0000 UTC m=+903.270570933 I0414 11:01:07.454284 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 11:01:07.454258923 +0000 UTC m=+903.270846792 I0414 11:01:07.473252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:07.473369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 11:01:07.473392 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 11:01:07.473386097 +0000 UTC m=+903.289973926 I0414 11:01:07.734990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:07.739937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cwtb9" condition "Approved" to 2026-04-14 11:01:07.739927347 +0000 UTC m=+903.556515176 I0414 11:01:07.756542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cwtb9" condition "Ready" to 2026-04-14 11:01:07.75653461 +0000 UTC m=+903.573122449 I0414 11:01:07.786258 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 11:01:07.786241233 +0000 UTC m=+903.602829072 I0414 11:01:07.808677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:07.809254 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 11:01:07.809247151 +0000 UTC m=+903.625834990 I0414 11:01:07.830370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:07.835162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:48.725961 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 11:01:48.725948273 +0000 UTC m=+944.542536112 I0414 11:01:48.726397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 11:01:48.726419 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 11:01:48.726414977 +0000 UTC m=+944.543002816 I0414 11:01:48.743076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:48.743238 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 11:01:48.743202997 +0000 UTC m=+944.559790836 I0414 11:01:48.847147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:48.875154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-glb5t" condition "Approved" to 2026-04-14 11:01:48.875142461 +0000 UTC m=+944.691730300 I0414 11:01:48.892696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-glb5t" condition "Ready" to 2026-04-14 11:01:48.892681143 +0000 UTC m=+944.709268982 I0414 11:01:48.922059 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 11:01:48.922039504 +0000 UTC m=+944.738627343 I0414 11:01:48.944199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:48.944548 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 11:01:48.944540887 +0000 UTC m=+944.761128726 I0414 11:01:48.965825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 11:01:48.966087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"