I0427 01:23:13.959158 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 01:23:13.959359 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 01:23:13.959479 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 01:23:13.962926 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 01:23:13.963449 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 01:23:13.963505 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 01:23:13.963529 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 01:23:13.966255 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 01:23:13.984579 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 01:23:13.988418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 01:23:13.993530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 01:23:13.996674 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 01:23:13.996703 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 01:23:13.996784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 01:23:13.999124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 01:23:14.005274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 01:23:14.007930 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 01:23:14.008031 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 01:23:14.010391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 01:23:14.012662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 01:23:14.015052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 01:23:14.016849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 01:23:14.018614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 01:23:14.018658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 01:23:14.024767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 01:23:14.028319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 01:23:14.031181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 01:23:14.033467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 01:23:14.033500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 01:23:14.033570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 01:23:14.035870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 01:23:14.037721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 01:23:14.039790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 01:23:14.043447 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.043814 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.044175 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.044530 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.044631 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.044814 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.044954 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.045521 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.047077 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:14.119846 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:30.477968 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 01:23:30.477941556 +0000 UTC m=+16.555040013 I0427 01:23:31.279949 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 01:23:31.279933883 +0000 UTC m=+17.357032320 I0427 01:23:31.280030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:23:31.280083 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:23:31.280068096 +0000 UTC m=+17.357166573 E0427 01:23:31.292836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:23:31.292897 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 01:23:31.292889596 +0000 UTC m=+17.369988023 E0427 01:23:31.292919 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:23:31.297729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:31.297793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:23:31.297817 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:23:31.297812103 +0000 UTC m=+17.374910530 E0427 01:23:31.306599 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 01:23:31.306795 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:23:31.306831 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:23:31.306891 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 01:23:31.336046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l4ns9" condition "Approved" to 2026-04-27 01:23:31.336035667 +0000 UTC m=+17.413134094 I0427 01:23:31.349757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l4ns9" condition "Ready" to 2026-04-27 01:23:31.349743591 +0000 UTC m=+17.426842038 I0427 01:23:31.370659 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:23:31.370644189 +0000 UTC m=+17.447742646 I0427 01:23:31.384978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:31.385620 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:23:31.385612234 +0000 UTC m=+17.462710661 I0427 01:23:31.401025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:36.309648 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:23:36.30823974 +0000 UTC m=+22.385338167 I0427 01:23:58.750229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:23:58.750222 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:23:58.749887991 +0000 UTC m=+44.826986418 I0427 01:23:58.750265 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 01:23:58.750257998 +0000 UTC m=+44.827356425 I0427 01:23:58.761421 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 01:23:58.76140916 +0000 UTC m=+44.838507577 I0427 01:23:58.787304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:58.787358 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:23:58.787351915 +0000 UTC m=+44.864450332 I0427 01:23:58.856356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:58.895561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r4bk6" condition "Approved" to 2026-04-27 01:23:58.895547894 +0000 UTC m=+44.972646321 I0427 01:23:58.924014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r4bk6" condition "Ready" to 2026-04-27 01:23:58.924003939 +0000 UTC m=+45.001102366 I0427 01:23:58.958211 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:23:58.958198429 +0000 UTC m=+45.035296856 I0427 01:23:58.990044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:23:59.041972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:28:13.670641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-27 01:28:13.670607681 +0000 UTC m=+299.747706158 I0427 01:28:13.670885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:28:13.670952 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-27 01:28:13.67094867 +0000 UTC m=+299.748047097 I0427 01:28:13.687406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:28:13.687476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:28:13.687520 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-27 01:28:13.68751279 +0000 UTC m=+299.764611217 I0427 01:28:13.822285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-cs9nn" condition "Approved" to 2026-04-27 01:28:13.822250569 +0000 UTC m=+299.899349026 I0427 01:28:13.853221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-cs9nn" condition "Ready" to 2026-04-27 01:28:13.853210001 +0000 UTC m=+299.930308428 I0427 01:28:13.882221 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:28:13.882195987 +0000 UTC m=+299.959294414 I0427 01:28:13.906260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:28:13.906807 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:28:13.906797616 +0000 UTC m=+299.983896063 I0427 01:28:13.911785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:28:13.924871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:28:13.925327 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:28:13.925316528 +0000 UTC m=+300.002414965 I0427 01:29:18.286589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:29:18.286795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:29:18.286784662 +0000 UTC m=+364.363883109 I0427 01:29:18.286592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 01:29:18.286569818 +0000 UTC m=+364.363668295 E0427 01:29:18.370419 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:29:18.370470 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 01:29:18.37045755 +0000 UTC m=+364.447555997 E0427 01:29:18.370709 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:29:18.375420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:29:18.375715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:29:18.375759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:29:18.375745291 +0000 UTC m=+364.452843748 E0427 01:29:18.390225 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 01:29:18.390330 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:29:18.390363 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:29:18.390438 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 01:29:18.440145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ksxkt" condition "Approved" to 2026-04-27 01:29:18.440129693 +0000 UTC m=+364.517228150 I0427 01:29:18.524388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ksxkt" condition "Ready" to 2026-04-27 01:29:18.524365823 +0000 UTC m=+364.601464270 I0427 01:29:18.560023 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:29:18.560007782 +0000 UTC m=+364.637106229 I0427 01:29:18.581229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:29:18.581533 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:29:18.581522913 +0000 UTC m=+364.658621370 I0427 01:29:18.598253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:29:23.391316 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:29:23.391296878 +0000 UTC m=+369.468395295 I0427 01:30:02.675833 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 01:30:02.675793544 +0000 UTC m=+408.752891961 I0427 01:30:02.676002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:02.676042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:30:02.676035529 +0000 UTC m=+408.753133946 I0427 01:30:02.694166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:02.694192 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 01:30:02.69418692 +0000 UTC m=+408.771285327 I0427 01:30:02.694452 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:30:02.694437605 +0000 UTC m=+408.771536042 I0427 01:30:02.699690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:02.699721 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 01:30:02.699714221 +0000 UTC m=+408.776812638 I0427 01:30:02.699996 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:30:02.699992396 +0000 UTC m=+408.777090813 I0427 01:30:02.732871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.732923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:02.732941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:30:02.73293663 +0000 UTC m=+408.810035047 I0427 01:30:02.741947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.742726 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:30:02.742717899 +0000 UTC m=+408.819816336 I0427 01:30:02.755873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.755999 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:30:02.755990051 +0000 UTC m=+408.833088488 I0427 01:30:02.854696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.879525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z54kw" condition "Approved" to 2026-04-27 01:30:02.879516042 +0000 UTC m=+408.956614459 I0427 01:30:02.904128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z54kw" condition "Ready" to 2026-04-27 01:30:02.904118403 +0000 UTC m=+408.981216820 I0427 01:30:02.941267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.946986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:02.949713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-msjlx" condition "Approved" to 2026-04-27 01:30:02.949704166 +0000 UTC m=+409.026802593 I0427 01:30:02.964924 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:02.964910565 +0000 UTC m=+409.042008992 I0427 01:30:02.975594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-msjlx" condition "Ready" to 2026-04-27 01:30:02.975584531 +0000 UTC m=+409.052682958 I0427 01:30:02.987330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mh5rg" condition "Approved" to 2026-04-27 01:30:02.987308605 +0000 UTC m=+409.064407042 I0427 01:30:02.988367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:03.078326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mh5rg" condition "Ready" to 2026-04-27 01:30:03.078313057 +0000 UTC m=+409.155411484 I0427 01:30:03.417103 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:03.41708294 +0000 UTC m=+409.494181367 I0427 01:30:03.716501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:03.717017 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:03.717005033 +0000 UTC m=+409.794103490 I0427 01:30:03.783030 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:03.783016389 +0000 UTC m=+409.860114836 I0427 01:30:04.099631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:04.099955 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:04.099948808 +0000 UTC m=+410.177047215 I0427 01:30:04.216512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:04.419411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:04.523647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:09.893774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:09.893795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" condition "Ready" to 2026-04-27 01:30:09.893772654 +0000 UTC m=+415.970871141 I0427 01:30:09.893810 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" condition "Issuing" to 2026-04-27 01:30:09.893801134 +0000 UTC m=+415.970899561 I0427 01:30:09.907922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nlds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:09.907997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:09.908027 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" condition "Issuing" to 2026-04-27 01:30:09.908018309 +0000 UTC m=+415.985116756 I0427 01:30:10.057373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nlds5-lxs7c" condition "Approved" to 2026-04-27 01:30:10.057361568 +0000 UTC m=+416.134459975 I0427 01:30:10.077929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nlds5-lxs7c" condition "Ready" to 2026-04-27 01:30:10.077919076 +0000 UTC m=+416.155017503 I0427 01:30:10.109465 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:10.109453171 +0000 UTC m=+416.186551578 I0427 01:30:10.130879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nlds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:10.131382 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:10.131374513 +0000 UTC m=+416.208472930 I0427 01:30:10.148810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nlds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:10.162020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nlds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nlds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:22.278815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:22.278899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 01:30:22.278890749 +0000 UTC m=+428.355989176 I0427 01:30:22.278961 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:30:22.27894438 +0000 UTC m=+428.356042807 I0427 01:30:22.296656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:22.297017 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:30:22.297004894 +0000 UTC m=+428.374103351 I0427 01:30:22.649511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:22.685341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ct28c" condition "Approved" to 2026-04-27 01:30:22.68533098 +0000 UTC m=+428.762429407 I0427 01:30:22.710059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ct28c" condition "Ready" to 2026-04-27 01:30:22.71004999 +0000 UTC m=+428.787148407 I0427 01:30:22.737380 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:22.737366084 +0000 UTC m=+428.814464511 I0427 01:30:22.759289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.079344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:33:34.079404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 01:33:34.079397107 +0000 UTC m=+620.156495514 I0427 01:33:34.079445 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:33:34.079436437 +0000 UTC m=+620.156534864 I0427 01:33:34.095483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.095566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:33:34.095588 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 01:33:34.095582096 +0000 UTC m=+620.172680523 I0427 01:33:34.288027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xrzps" condition "Approved" to 2026-04-27 01:33:34.288010706 +0000 UTC m=+620.365109153 I0427 01:33:34.347149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xrzps" condition "Ready" to 2026-04-27 01:33:34.347137104 +0000 UTC m=+620.424235541 I0427 01:33:34.415582 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:34.415567304 +0000 UTC m=+620.492665731 I0427 01:33:34.442341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.442721 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:34.442713676 +0000 UTC m=+620.519812103 I0427 01:33:34.444988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.460567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.460936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:34.462133 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:34.462125728 +0000 UTC m=+620.539224145 I0427 01:34:11.280990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:34:11.281023 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 01:34:11.281016003 +0000 UTC m=+657.358114430 I0427 01:34:11.281082 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 01:34:11.281068813 +0000 UTC m=+657.358167230 I0427 01:34:11.296210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:11.296265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:34:11.296310 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 01:34:11.296302427 +0000 UTC m=+657.373400854 I0427 01:34:11.877427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-z8bq6" condition "Approved" to 2026-04-27 01:34:11.877411413 +0000 UTC m=+657.954509840 I0427 01:34:11.907475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-z8bq6" condition "Ready" to 2026-04-27 01:34:11.907462475 +0000 UTC m=+657.984560902 I0427 01:34:11.935294 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:34:11.935280897 +0000 UTC m=+658.012379314 I0427 01:34:11.953694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:11.954021 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:34:11.954015285 +0000 UTC m=+658.031113702 I0427 01:34:11.962301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:11.974630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:11.975102 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:34:11.975095292 +0000 UTC m=+658.052193719 I0427 01:34:11.977457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"