I0509 12:50:34.844825 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0509 12:50:34.845020 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0509 12:50:34.845121 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0509 12:50:34.852748 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0509 12:50:34.853232 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0509 12:50:34.853345 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0509 12:50:34.853387 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0509 12:50:34.856375 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0509 12:50:34.869443 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0509 12:50:34.874026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0509 12:50:34.878010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0509 12:50:34.883137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0509 12:50:34.883266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0509 12:50:34.886402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0509 12:50:34.888289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0509 12:50:34.890124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0509 12:50:34.890147 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0509 12:50:34.890200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0509 12:50:34.892058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0509 12:50:34.893821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0509 12:50:34.895858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0509 12:50:34.900844 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0509 12:50:34.905380 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0509 12:50:34.905475 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0509 12:50:34.905643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0509 12:50:34.909658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0509 12:50:34.911859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0509 12:50:34.914102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0509 12:50:34.916283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0509 12:50:34.918600 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0509 12:50:34.918669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0509 12:50:34.920546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0509 12:50:34.923872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0509 12:50:34.925661 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.929705 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.930712 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.931001 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.931855 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.931902 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.932657 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.933119 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:34.933928 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:35.025828 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 12:50:52.288282 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-09 12:50:52.2882579 +0000 UTC m=+17.479999575 I0509 12:50:53.110268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:50:53.110394 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 12:50:53.110381974 +0000 UTC m=+18.302123659 I0509 12:50:53.112119 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-09 12:50:53.112094451 +0000 UTC m=+18.303836136 I0509 12:50:53.125263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:50:53.125340 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-09 12:50:53.125335254 +0000 UTC m=+18.317076909 E0509 12:50:53.131221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 12:50:53.131295 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-09 12:50:53.131288694 +0000 UTC m=+18.323030359 E0509 12:50:53.131321 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 12:50:53.141805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0509 12:50:53.142854 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0509 12:50:53.142950 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 12:50:53.142999 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 12:50:53.143023 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0509 12:50:53.165370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bnbw2" condition "Approved" to 2026-05-09 12:50:53.165340834 +0000 UTC m=+18.357082509 I0509 12:50:53.178810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bnbw2" condition "Ready" to 2026-05-09 12:50:53.178800484 +0000 UTC m=+18.370542139 I0509 12:50:53.196494 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:50:53.196482846 +0000 UTC m=+18.388224491 I0509 12:50:53.214216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:50:53.214514 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:50:53.214507828 +0000 UTC m=+18.406249473 I0509 12:50:53.219077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:50:53.229555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:50:53.229697 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:50:53.229692727 +0000 UTC m=+18.421434362 I0509 12:50:58.143700 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:50:58.143684273 +0000 UTC m=+23.335425948 I0509 12:51:20.674486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:51:20.674587 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 12:51:20.674576627 +0000 UTC m=+45.866318312 I0509 12:51:20.674710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-09 12:51:20.674686099 +0000 UTC m=+45.866427754 I0509 12:51:20.688633 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-09 12:51:20.688615452 +0000 UTC m=+45.880357107 I0509 12:51:20.698036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:51:20.701681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:51:20.701825 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 12:51:20.701814186 +0000 UTC m=+45.893555841 I0509 12:51:20.888003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s6lv4" condition "Approved" to 2026-05-09 12:51:20.88798903 +0000 UTC m=+46.079730665 I0509 12:51:20.919949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s6lv4" condition "Ready" to 2026-05-09 12:51:20.919934308 +0000 UTC m=+46.111675963 I0509 12:51:20.946821 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:51:20.946806269 +0000 UTC m=+46.138547914 I0509 12:51:20.967586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:55:50.365289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:55:50.365345 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-05-09 12:55:50.365331853 +0000 UTC m=+315.557073538 I0509 12:55:50.365330 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-05-09 12:55:50.365301803 +0000 UTC m=+315.557043488 I0509 12:55:50.391899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:55:50.391996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:55:50.392022 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-05-09 12:55:50.392012077 +0000 UTC m=+315.583753752 I0509 12:55:50.724820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:55:50.744968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-whdg2" condition "Approved" to 2026-05-09 12:55:50.744938727 +0000 UTC m=+315.936680402 I0509 12:55:50.779528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-whdg2" condition "Ready" to 2026-05-09 12:55:50.779510852 +0000 UTC m=+315.971252527 I0509 12:55:50.811661 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:55:50.811641254 +0000 UTC m=+316.003382929 I0509 12:55:50.829862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:55:50.830359 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:55:50.830351944 +0000 UTC m=+316.022093599 I0509 12:55:50.854700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:56:55.705150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:56:55.705186 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-09 12:56:55.705178166 +0000 UTC m=+380.896919821 I0509 12:56:55.705516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-09 12:56:55.705509493 +0000 UTC m=+380.897251148 E0509 12:56:55.718512 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 12:56:55.718596 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-09 12:56:55.718559839 +0000 UTC m=+380.910301484 E0509 12:56:55.718668 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 12:56:55.719614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:56:55.719792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:56:55.719873 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-09 12:56:55.719815514 +0000 UTC m=+380.911557169 E0509 12:56:55.728284 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0509 12:56:55.728531 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 12:56:55.728659 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 12:56:55.728775 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0509 12:56:55.765814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4fr4k" condition "Approved" to 2026-05-09 12:56:55.76580057 +0000 UTC m=+380.957542215 I0509 12:56:55.767079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:56:55.778742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4fr4k" condition "Ready" to 2026-05-09 12:56:55.778729704 +0000 UTC m=+380.970471339 I0509 12:56:55.797959 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:56:55.797949334 +0000 UTC m=+380.989690989 I0509 12:56:55.815772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:56:55.816055 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:56:55.816044183 +0000 UTC m=+381.007785828 I0509 12:56:55.826113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:56:55.826369 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:56:55.826346793 +0000 UTC m=+381.018088448 I0509 12:56:55.828746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:00.729729 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:00.729713476 +0000 UTC m=+385.921455151 I0509 12:57:44.553073 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-09 12:57:44.553057686 +0000 UTC m=+429.744799331 I0509 12:57:44.553620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:44.557932 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-09 12:57:44.557925923 +0000 UTC m=+429.749667568 I0509 12:57:44.571792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:44.571809 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-09 12:57:44.57179769 +0000 UTC m=+429.763539335 I0509 12:57:44.571831 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 12:57:44.571822311 +0000 UTC m=+429.763563946 I0509 12:57:44.572175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:44.572199 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-09 12:57:44.572196847 +0000 UTC m=+429.763938492 I0509 12:57:44.572562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-09 12:57:44.572558524 +0000 UTC m=+429.764300159 I0509 12:57:44.598433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:44.598509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:44.598536 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-09 12:57:44.598529387 +0000 UTC m=+429.790271042 I0509 12:57:44.607371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:44.608143 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-09 12:57:44.608133918 +0000 UTC m=+429.799875563 I0509 12:57:44.615502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:44.615555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:44.615572 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 12:57:44.615568391 +0000 UTC m=+429.807310026 I0509 12:57:44.995283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-djn4f" condition "Approved" to 2026-05-09 12:57:44.995270901 +0000 UTC m=+430.187012546 I0509 12:57:44.996495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:45.006814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g7wxl" condition "Approved" to 2026-05-09 12:57:45.006800567 +0000 UTC m=+430.198542222 I0509 12:57:45.024516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-djn4f" condition "Ready" to 2026-05-09 12:57:45.024507062 +0000 UTC m=+430.216248717 I0509 12:57:45.026463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g7wxl" condition "Ready" to 2026-05-09 12:57:45.026449916 +0000 UTC m=+430.218191571 I0509 12:57:45.066749 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:45.066736144 +0000 UTC m=+430.258477799 I0509 12:57:45.093974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:45.102341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:45.102637 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:45.102629502 +0000 UTC m=+430.294371137 I0509 12:57:45.107079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:45.107162 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 12:57:45.107152972 +0000 UTC m=+430.298894607 I0509 12:57:45.114847 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:45.114833709 +0000 UTC m=+430.306575354 I0509 12:57:45.145187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:45.187699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:45.188078 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:45.188068792 +0000 UTC m=+430.379810437 I0509 12:57:45.241372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0509 12:57:45.536602 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-5jjqj\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0509 12:57:45.652603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tp5x9" condition "Approved" to 2026-05-09 12:57:45.652582435 +0000 UTC m=+430.844324110 I0509 12:57:45.897370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tp5x9" condition "Ready" to 2026-05-09 12:57:45.897357779 +0000 UTC m=+431.089099434 I0509 12:57:46.193195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lzqs" condition "Approved" to 2026-05-09 12:57:46.193177474 +0000 UTC m=+431.384919129 I0509 12:57:46.654222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lzqs" condition "Ready" to 2026-05-09 12:57:46.654204576 +0000 UTC m=+431.845946261 I0509 12:57:46.949712 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-8lzqs" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-gxcjv" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0509 12:57:47.186035 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-gxcjv\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0509 12:57:47.396835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7h59q" condition "Approved" to 2026-05-09 12:57:47.39681229 +0000 UTC m=+432.588553965 I0509 12:57:47.488394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:47.856513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7h59q" condition "Ready" to 2026-05-09 12:57:47.85650405 +0000 UTC m=+433.048245695 I0509 12:57:48.039751 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:48.039734532 +0000 UTC m=+433.231476167 I0509 12:57:48.138589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:48.138939 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:48.138931414 +0000 UTC m=+433.330673069 I0509 12:57:48.389895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:48.439722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:52.686884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" condition "Ready" to 2026-05-09 12:57:52.686870791 +0000 UTC m=+437.878612446 I0509 12:57:52.686980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:57:52.687040 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" condition "Issuing" to 2026-05-09 12:57:52.687028914 +0000 UTC m=+437.878770569 I0509 12:57:52.707294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:52.707669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" condition "Ready" to 2026-05-09 12:57:52.707649484 +0000 UTC m=+437.899391159 I0509 12:57:52.837822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:57:52.872145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6r6ck-z96l5" condition "Approved" to 2026-05-09 12:57:52.872122074 +0000 UTC m=+438.063863729 I0509 12:57:52.892537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6r6ck-z96l5" condition "Ready" to 2026-05-09 12:57:52.89250787 +0000 UTC m=+438.084249515 I0509 12:57:52.922059 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:57:52.922036628 +0000 UTC m=+438.113778303 I0509 12:57:52.942523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6r6ck-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:58:05.349611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:58:05.349714 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-09 12:58:05.349708518 +0000 UTC m=+450.541450173 I0509 12:58:05.349658 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-09 12:58:05.349647067 +0000 UTC m=+450.541388722 I0509 12:58:05.392332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:58:05.392529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 12:58:05.392628 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-09 12:58:05.392618089 +0000 UTC m=+450.584359744 I0509 12:58:05.908440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:58:05.921922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nd7fq" condition "Approved" to 2026-05-09 12:58:05.921911153 +0000 UTC m=+451.113652788 I0509 12:58:05.948009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nd7fq" condition "Ready" to 2026-05-09 12:58:05.947986028 +0000 UTC m=+451.139727673 I0509 12:58:05.977795 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:05.977778394 +0000 UTC m=+451.169520059 I0509 12:58:06.000448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:58:06.002081 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:06.002071498 +0000 UTC m=+451.193813173 I0509 12:58:06.012721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 12:58:06.022504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.470688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 13:01:19.470772 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-09 13:01:19.4707652 +0000 UTC m=+644.662506845 I0509 13:01:19.470961 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-09 13:01:19.470935722 +0000 UTC m=+644.662677367 I0509 13:01:19.492387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.492728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 13:01:19.492785 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-09 13:01:19.492754715 +0000 UTC m=+644.684496380 I0509 13:01:19.690815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rbzqj" condition "Approved" to 2026-05-09 13:01:19.690803337 +0000 UTC m=+644.882544982 I0509 13:01:19.712186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rbzqj" condition "Ready" to 2026-05-09 13:01:19.712174665 +0000 UTC m=+644.903916320 I0509 13:01:19.746219 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:01:19.746199422 +0000 UTC m=+644.937941067 I0509 13:01:19.765638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.768224 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:01:19.768145898 +0000 UTC m=+644.959887553 I0509 13:01:19.793779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.798688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.801482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:19.801911 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:01:19.801900751 +0000 UTC m=+644.993642396 I0509 13:01:59.730849 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-09 13:01:59.730817925 +0000 UTC m=+684.922559580 I0509 13:01:59.731441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 13:01:59.731467 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-09 13:01:59.731463124 +0000 UTC m=+684.923204969 I0509 13:01:59.754521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:01:59.754605 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-09 13:01:59.754596209 +0000 UTC m=+684.946337884 I0509 13:01:59.953909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 13:02:00.004957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dgkhc" condition "Approved" to 2026-05-09 13:02:00.004933867 +0000 UTC m=+685.196675532 I0509 13:02:00.116680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dgkhc" condition "Ready" to 2026-05-09 13:02:00.116667539 +0000 UTC m=+685.308409174 I0509 13:02:00.159552 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:02:00.159533043 +0000 UTC m=+685.351274718 I0509 13:02:00.183650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"