I0520 19:38:08.125650 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 19:38:08.125781 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 19:38:08.125842 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 19:38:08.131623 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 19:38:08.132296 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 19:38:08.132351 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 19:38:08.132477 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 19:38:08.136110 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 19:38:08.149769 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 19:38:08.153821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 19:38:08.156105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 19:38:08.161685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 19:38:08.165487 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 19:38:08.165600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 19:38:08.168330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 19:38:08.170917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 19:38:08.173969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 19:38:08.176631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 19:38:08.178449 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 19:38:08.178467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 19:38:08.178474 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 19:38:08.178577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 19:38:08.183629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 19:38:08.188253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 19:38:08.191442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 19:38:08.194534 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 19:38:08.194565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 19:38:08.194665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 19:38:08.198814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 19:38:08.202910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 19:38:08.205814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 19:38:08.207878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 19:38:08.211805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 19:38:08.214422 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.215105 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.215425 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.234051 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.246492 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.264115 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.282698 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.300501 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.302851 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:08.321007 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 19:38:23.282148 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 19:38:23.282126339 +0000 UTC m=+15.187449052 I0520 19:38:23.968625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:38:23.968720 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 19:38:23.968708322 +0000 UTC m=+15.874031055 I0520 19:38:23.968796 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 19:38:23.968692981 +0000 UTC m=+15.874015714 E0520 19:38:23.982744 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 19:38:23.982852 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 19:38:23.982844951 +0000 UTC m=+15.888167664 E0520 19:38:23.982936 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 19:38:23.986063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:38:23.986136 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 19:38:23.986127765 +0000 UTC m=+15.891450478 E0520 19:38:23.994679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 19:38:23.994879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 19:38:23.995024 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 19:38:23.995166 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 19:38:24.002583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:38:24.025263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mfn4q" condition "Approved" to 2026-05-20 19:38:24.025248018 +0000 UTC m=+15.930570751 I0520 19:38:24.053012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mfn4q" condition "Ready" to 2026-05-20 19:38:24.052996466 +0000 UTC m=+15.958319189 I0520 19:38:24.076273 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:38:24.076260489 +0000 UTC m=+15.981583192 I0520 19:38:24.096211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:38:28.995241 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:38:28.995226812 +0000 UTC m=+20.900549545 I0520 19:39:07.711341 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 19:39:07.711266035 +0000 UTC m=+59.616588778 I0520 19:39:07.712023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:39:07.712155 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 19:39:07.712138682 +0000 UTC m=+59.617461445 I0520 19:39:07.751533 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 19:39:07.751518642 +0000 UTC m=+59.656841385 I0520 19:39:07.766753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:39:07.766969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:39:07.767042 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 19:39:07.767030333 +0000 UTC m=+59.672353076 I0520 19:39:08.537984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wtcl6" condition "Approved" to 2026-05-20 19:39:08.537968881 +0000 UTC m=+60.443291614 I0520 19:39:08.606084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wtcl6" condition "Ready" to 2026-05-20 19:39:08.606069277 +0000 UTC m=+60.511392010 I0520 19:39:08.694616 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:39:08.694603655 +0000 UTC m=+60.599926358 I0520 19:39:08.860410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:08.577628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:44:08.577711 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-05-20 19:44:08.577689033 +0000 UTC m=+360.483011766 I0520 19:44:08.578683 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-05-20 19:44:08.578674332 +0000 UTC m=+360.483997065 I0520 19:44:08.699438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:08.699486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:44:08.699531 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-05-20 19:44:08.699524747 +0000 UTC m=+360.604847450 I0520 19:44:09.005768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-82zbx" condition "Approved" to 2026-05-20 19:44:09.005721568 +0000 UTC m=+360.911044301 I0520 19:44:09.036367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-82zbx" condition "Ready" to 2026-05-20 19:44:09.036356401 +0000 UTC m=+360.941679114 I0520 19:44:09.068441 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:44:09.068428696 +0000 UTC m=+360.973751419 I0520 19:44:09.087212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:09.088389 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:44:09.088380338 +0000 UTC m=+360.993703051 I0520 19:44:09.101964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:09.107735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:09.109058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:44:09.109278 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:44:09.109272007 +0000 UTC m=+361.014594710 I0520 19:45:14.509108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:45:14.509140 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 19:45:14.509134438 +0000 UTC m=+426.414457151 I0520 19:45:14.509115 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 19:45:14.509064726 +0000 UTC m=+426.414387469 E0520 19:45:14.521659 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 19:45:14.521699 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 19:45:14.521694588 +0000 UTC m=+426.427017291 E0520 19:45:14.521716 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 19:45:14.523893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:14.523929 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 19:45:14.523926082 +0000 UTC m=+426.429248785 E0520 19:45:14.536841 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 19:45:14.537428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 19:45:14.537500 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 19:45:14.537576 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 19:45:14.541604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:14.559026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w7z6t" condition "Approved" to 2026-05-20 19:45:14.559007796 +0000 UTC m=+426.464330539 I0520 19:45:14.569776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w7z6t" condition "Ready" to 2026-05-20 19:45:14.569750704 +0000 UTC m=+426.475073417 I0520 19:45:14.611364 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:45:14.611344965 +0000 UTC m=+426.516667678 I0520 19:45:14.632146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:14.632387 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:45:14.632380237 +0000 UTC m=+426.537702950 I0520 19:45:14.635787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:14.648530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:14.649978 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:45:14.64996443 +0000 UTC m=+426.555287143 I0520 19:45:14.651714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:45:19.537305 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:45:19.537291735 +0000 UTC m=+431.442614478 I0520 19:46:03.427801 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 19:46:03.427754645 +0000 UTC m=+475.333077358 I0520 19:46:03.428226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:03.428274 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 19:46:03.428270579 +0000 UTC m=+475.333593282 I0520 19:46:03.428824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:03.428843 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 19:46:03.428839046 +0000 UTC m=+475.334161749 I0520 19:46:03.429060 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 19:46:03.429056112 +0000 UTC m=+475.334378825 I0520 19:46:03.429252 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 19:46:03.429247627 +0000 UTC m=+475.334570330 I0520 19:46:03.429446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:03.429463 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 19:46:03.429459673 +0000 UTC m=+475.334782376 I0520 19:46:03.565642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.565714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:03.565746 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 19:46:03.56572548 +0000 UTC m=+475.471048183 I0520 19:46:03.570436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.570524 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 19:46:03.570517346 +0000 UTC m=+475.475840049 I0520 19:46:03.576596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.576648 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 19:46:03.576641 +0000 UTC m=+475.481963703 I0520 19:46:03.746523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.789789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-76cd4" condition "Approved" to 2026-05-20 19:46:03.789779968 +0000 UTC m=+475.695102671 I0520 19:46:03.820489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-76cd4" condition "Ready" to 2026-05-20 19:46:03.820469819 +0000 UTC m=+475.725792522 I0520 19:46:03.855674 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:03.855662817 +0000 UTC m=+475.760985520 I0520 19:46:03.880434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.880612 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:03.880606305 +0000 UTC m=+475.785928998 I0520 19:46:03.913491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:03.914429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-flbln" condition "Approved" to 2026-05-20 19:46:03.914418395 +0000 UTC m=+475.819741098 I0520 19:46:03.934527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-flbln" condition "Ready" to 2026-05-20 19:46:03.934516875 +0000 UTC m=+475.839839578 I0520 19:46:03.961848 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:03.96183538 +0000 UTC m=+475.867158093 I0520 19:46:03.985997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:04.595345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:04.990861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g8fsr" condition "Approved" to 2026-05-20 19:46:04.990845665 +0000 UTC m=+476.896168398 I0520 19:46:05.016218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g8fsr" condition "Ready" to 2026-05-20 19:46:05.016204564 +0000 UTC m=+476.921527287 I0520 19:46:05.365182 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-g8fsr" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-mplkr" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0520 19:46:05.394909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5qkbr" condition "Approved" to 2026-05-20 19:46:05.394885807 +0000 UTC m=+477.300208510 I0520 19:46:05.457149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5qkbr" condition "Ready" to 2026-05-20 19:46:05.457132402 +0000 UTC m=+477.362455125 I0520 19:46:05.795005 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:05.794991167 +0000 UTC m=+477.700313880 I0520 19:46:05.845902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:05.846254 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:05.84624739 +0000 UTC m=+477.751570093 I0520 19:46:06.049292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:20.279911 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" condition "Ready" to 2026-05-20 19:46:20.279893876 +0000 UTC m=+492.185216609 I0520 19:46:20.280036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:20.280062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" condition "Issuing" to 2026-05-20 19:46:20.280054491 +0000 UTC m=+492.185377224 I0520 19:46:20.466645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:20.466732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:46:20.466870 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" condition "Issuing" to 2026-05-20 19:46:20.466863039 +0000 UTC m=+492.372185762 I0520 19:46:20.848058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:20.950987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8rzgn-2zn8l" condition "Approved" to 2026-05-20 19:46:20.950974264 +0000 UTC m=+492.856296957 I0520 19:46:21.050580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8rzgn-2zn8l" condition "Ready" to 2026-05-20 19:46:21.050563343 +0000 UTC m=+492.955886086 I0520 19:46:21.385098 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:21.38508195 +0000 UTC m=+493.290404673 I0520 19:46:21.483494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:21.483965 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:46:21.483956459 +0000 UTC m=+493.389279172 I0520 19:46:22.440803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:46:22.441024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rzgn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:47:00.368107 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 19:47:00.368088708 +0000 UTC m=+532.273411411 I0520 19:47:00.368706 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:47:00.368728 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 19:47:00.368724465 +0000 UTC m=+532.274047168 I0520 19:47:00.404766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:47:00.404873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:47:00.404899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 19:47:00.404891985 +0000 UTC m=+532.310214708 I0520 19:47:00.784767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:47:00.791635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n7xfc" condition "Approved" to 2026-05-20 19:47:00.791617372 +0000 UTC m=+532.696940095 I0520 19:47:00.815764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n7xfc" condition "Ready" to 2026-05-20 19:47:00.815748442 +0000 UTC m=+532.721071155 I0520 19:47:00.856150 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:47:00.85613396 +0000 UTC m=+532.761456653 I0520 19:47:00.878649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:47:00.879111 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:47:00.879104307 +0000 UTC m=+532.784427010 I0520 19:47:00.902122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:03.158877 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 19:50:03.158859346 +0000 UTC m=+715.064182069 I0520 19:50:03.159243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:50:03.159306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 19:50:03.159299608 +0000 UTC m=+715.064622321 I0520 19:50:03.177173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:03.177250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:50:03.177268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 19:50:03.17726186 +0000 UTC m=+715.082584573 I0520 19:50:03.325095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-29p6m" condition "Approved" to 2026-05-20 19:50:03.325068666 +0000 UTC m=+715.230391389 I0520 19:50:03.351029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-29p6m" condition "Ready" to 2026-05-20 19:50:03.35101363 +0000 UTC m=+715.256336363 I0520 19:50:03.382587 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:50:03.382579012 +0000 UTC m=+715.287901705 I0520 19:50:03.402773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:03.403142 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:50:03.403133355 +0000 UTC m=+715.308456058 I0520 19:50:03.416806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:03.434010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:50.241983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 19:50:50.242057 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 19:50:50.242050283 +0000 UTC m=+762.147372986 I0520 19:50:50.242055 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 19:50:50.242039743 +0000 UTC m=+762.147362456 I0520 19:50:50.261782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:50.261847 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 19:50:50.261839931 +0000 UTC m=+762.167162634 I0520 19:50:50.363056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 19:50:50.393842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8dxf2" condition "Approved" to 2026-05-20 19:50:50.393828879 +0000 UTC m=+762.299151582 I0520 19:50:50.410313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8dxf2" condition "Ready" to 2026-05-20 19:50:50.410304197 +0000 UTC m=+762.315626900 I0520 19:50:50.443711 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 19:50:50.443696808 +0000 UTC m=+762.349019521 I0520 19:50:50.468156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"