I0527 19:38:48.158663 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0527 19:38:48.158918 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0527 19:38:48.159055 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0527 19:38:48.169694 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0527 19:38:48.170415 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0527 19:38:48.170626 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0527 19:38:48.170976 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0527 19:38:48.175297 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0527 19:38:48.190104 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0527 19:38:48.193217 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0527 19:38:48.193300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0527 19:38:48.196810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0527 19:38:48.201202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0527 19:38:48.203668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0527 19:38:48.205399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0527 19:38:48.207392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0527 19:38:48.208974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0527 19:38:48.210693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0527 19:38:48.210710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0527 19:38:48.210718 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0527 19:38:48.210780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0527 19:38:48.212707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0527 19:38:48.217106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0527 19:38:48.219615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0527 19:38:48.222042 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0527 19:38:48.222071 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0527 19:38:48.222114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0527 19:38:48.224632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0527 19:38:48.227034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0527 19:38:48.229709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0527 19:38:48.231600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0527 19:38:48.233412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0527 19:38:48.235832 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0527 19:38:48.240420 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.241211 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.242851 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.259138 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.275440 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.290868 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.303056 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.316723 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.335209 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:48.340687 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:39:06.697081 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-27 19:39:06.697048196 +0000 UTC m=+18.567124910 I0527 19:39:07.501582 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 19:39:07.501563953 +0000 UTC m=+19.371640677 I0527 19:39:07.503125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:39:07.503209 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 19:39:07.503199146 +0000 UTC m=+19.373275890 I0527 19:39:07.517280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:07.517388 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 19:39:07.517379595 +0000 UTC m=+19.387456279 E0527 19:39:07.518405 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:39:07.518505 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-27 19:39:07.518492597 +0000 UTC m=+19.388569291 E0527 19:39:07.518538 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:39:07.533712 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0527 19:39:07.533813 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:39:07.533858 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:39:07.533894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0527 19:39:07.536066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:07.536125 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 19:39:07.536117285 +0000 UTC m=+19.406193979 I0527 19:39:07.548156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqkqz" condition "Approved" to 2026-05-27 19:39:07.548141181 +0000 UTC m=+19.418217885 I0527 19:39:07.560206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqkqz" condition "Ready" to 2026-05-27 19:39:07.560193816 +0000 UTC m=+19.430270510 I0527 19:39:07.586238 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:07.586226605 +0000 UTC m=+19.456303289 I0527 19:39:07.604673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:07.648259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:12.534214 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:12.53419816 +0000 UTC m=+24.404274844 I0527 19:39:38.880906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:39:38.880951 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 19:39:38.880943526 +0000 UTC m=+50.751020220 I0527 19:39:38.881080 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 19:39:38.881049139 +0000 UTC m=+50.751125833 I0527 19:39:38.897213 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-27 19:39:38.897199088 +0000 UTC m=+50.767275772 I0527 19:39:38.937734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:38.937829 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 19:39:38.93782103 +0000 UTC m=+50.807897714 I0527 19:39:39.044969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:39.086439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2bqgp" condition "Approved" to 2026-05-27 19:39:39.08642738 +0000 UTC m=+50.956504064 I0527 19:39:39.117759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2bqgp" condition "Ready" to 2026-05-27 19:39:39.117746018 +0000 UTC m=+50.987822712 I0527 19:39:39.159333 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:39.159321634 +0000 UTC m=+51.029398328 I0527 19:39:39.180946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.557095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-103.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:44:07.557127 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Issuing" to 2026-05-27 19:44:07.557119347 +0000 UTC m=+319.427196041 I0527 19:44:07.557456 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready" to 2026-05-27 19:44:07.557449515 +0000 UTC m=+319.427526209 I0527 19:44:07.574187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.574271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready" to 2026-05-27 19:44:07.574262315 +0000 UTC m=+319.444339009 I0527 19:44:07.698112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.726397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-vfrrg" condition "Approved" to 2026-05-27 19:44:07.726384675 +0000 UTC m=+319.596461369 I0527 19:44:07.752955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-vfrrg" condition "Ready" to 2026-05-27 19:44:07.752940545 +0000 UTC m=+319.623017239 I0527 19:44:07.780688 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:44:07.780671092 +0000 UTC m=+319.650747786 I0527 19:44:07.805701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.806308 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:44:07.806299971 +0000 UTC m=+319.676376665 I0527 19:44:07.822501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.822868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:07.823039 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:44:07.82302772 +0000 UTC m=+319.693104414 I0527 19:45:11.540658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 19:45:11.540614447 +0000 UTC m=+383.410691131 I0527 19:45:11.541577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:11.541642 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 19:45:11.541634038 +0000 UTC m=+383.411710732 E0527 19:45:11.555313 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:45:11.555323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:11.555363 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-27 19:45:11.555356148 +0000 UTC m=+383.425432842 I0527 19:45:11.555417 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 19:45:11.555410229 +0000 UTC m=+383.425486923 E0527 19:45:11.555423 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:45:11.571185 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0527 19:45:11.571291 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:45:11.571434 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:45:11.571843 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0527 19:45:11.574112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:11.594757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8nvn" condition "Approved" to 2026-05-27 19:45:11.594742573 +0000 UTC m=+383.464819267 I0527 19:45:11.609065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8nvn" condition "Ready" to 2026-05-27 19:45:11.609053584 +0000 UTC m=+383.479130278 I0527 19:45:11.631792 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:11.631770651 +0000 UTC m=+383.501847375 I0527 19:45:11.647781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:11.648007 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:11.6480008 +0000 UTC m=+383.518077494 I0527 19:45:11.655819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:11.661651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:16.571684 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:16.571670568 +0000 UTC m=+388.441747292 I0527 19:45:57.702695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:57.702754 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 19:45:57.702749359 +0000 UTC m=+429.572826043 I0527 19:45:57.706974 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 19:45:57.706960555 +0000 UTC m=+429.577037239 I0527 19:45:57.707424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:57.707451 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 19:45:57.707447095 +0000 UTC m=+429.577523779 I0527 19:45:57.707818 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 19:45:57.707812982 +0000 UTC m=+429.577889666 I0527 19:45:57.732213 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 19:45:57.732197257 +0000 UTC m=+429.602273951 I0527 19:45:57.732605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:57.732627 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 19:45:57.732622866 +0000 UTC m=+429.602699560 I0527 19:45:57.745100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:57.745300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:57.745332 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 19:45:57.745325768 +0000 UTC m=+429.615402462 I0527 19:45:57.747229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:57.747272 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 19:45:57.747267654 +0000 UTC m=+429.617344338 I0527 19:45:57.757017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:57.757066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:57.757084 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 19:45:57.757078243 +0000 UTC m=+429.627154927 I0527 19:45:58.035475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:58.090870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4gsv6" condition "Approved" to 2026-05-27 19:45:58.09085848 +0000 UTC m=+429.960935164 I0527 19:45:58.118315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4gsv6" condition "Ready" to 2026-05-27 19:45:58.118303562 +0000 UTC m=+429.988380256 I0527 19:45:58.167801 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:58.167791157 +0000 UTC m=+430.037867841 I0527 19:45:58.189097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:58.201173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4h442" condition "Approved" to 2026-05-27 19:45:58.201155847 +0000 UTC m=+430.071232571 I0527 19:45:58.243758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4h442" condition "Ready" to 2026-05-27 19:45:58.243748035 +0000 UTC m=+430.113824709 E0527 19:45:58.269382 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-lnj7f\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0527 19:45:58.306932 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:58.30691328 +0000 UTC m=+430.176989974 I0527 19:45:58.336460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:58.750079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gqxrv" condition "Approved" to 2026-05-27 19:45:58.750060991 +0000 UTC m=+430.620137675 I0527 19:45:59.194942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gqxrv" condition "Ready" to 2026-05-27 19:45:59.194922818 +0000 UTC m=+431.064999512 I0527 19:45:59.348183 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-gqxrv" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-df6rm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0527 19:45:59.479867 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-df6rm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0527 19:45:59.562979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rdwtf" condition "Approved" to 2026-05-27 19:45:59.562952106 +0000 UTC m=+431.433028800 I0527 19:45:59.845508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rdwtf" condition "Ready" to 2026-05-27 19:45:59.845485364 +0000 UTC m=+431.715562078 I0527 19:46:00.090037 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:00.089998845 +0000 UTC m=+431.960075559 I0527 19:46:00.188596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:00.189481 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:00.189474259 +0000 UTC m=+432.059550953 I0527 19:46:00.549411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:00.549465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:07.430558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:07.430557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" condition "Ready" to 2026-05-27 19:46:07.430524053 +0000 UTC m=+439.300600767 I0527 19:46:07.430786 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" condition "Issuing" to 2026-05-27 19:46:07.430600394 +0000 UTC m=+439.300677108 I0527 19:46:07.449498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkghh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:07.449665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:07.449744 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" condition "Issuing" to 2026-05-27 19:46:07.44973445 +0000 UTC m=+439.319811174 I0527 19:46:07.680411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkghh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:07.689253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wkghh-g6tpl" condition "Approved" to 2026-05-27 19:46:07.689239038 +0000 UTC m=+439.559315722 I0527 19:46:07.719356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wkghh-g6tpl" condition "Ready" to 2026-05-27 19:46:07.719337531 +0000 UTC m=+439.589414255 I0527 19:46:07.754211 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:07.754197731 +0000 UTC m=+439.624274425 I0527 19:46:07.770877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkghh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:07.771070 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:07.771064856 +0000 UTC m=+439.641141540 I0527 19:46:07.788008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkghh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkghh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:20.940587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 19:46:20.940573256 +0000 UTC m=+452.810649960 I0527 19:46:20.940771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:20.940791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 19:46:20.940786939 +0000 UTC m=+452.810863633 I0527 19:46:20.959254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:20.959345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:20.959370 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 19:46:20.95936171 +0000 UTC m=+452.829438424 I0527 19:46:21.168585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:21.177935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jgvqn" condition "Approved" to 2026-05-27 19:46:21.177924274 +0000 UTC m=+453.048000968 I0527 19:46:21.198438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jgvqn" condition "Ready" to 2026-05-27 19:46:21.198426448 +0000 UTC m=+453.068503142 I0527 19:46:21.224466 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:21.22445681 +0000 UTC m=+453.094533494 I0527 19:46:21.244448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:21.244689 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:21.24468159 +0000 UTC m=+453.114758264 I0527 19:46:21.268921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:21.269178 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:21.269171134 +0000 UTC m=+453.139247828 I0527 19:49:34.841907 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 19:49:34.841890771 +0000 UTC m=+646.711967465 I0527 19:49:34.842517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:49:34.842611 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 19:49:34.842582451 +0000 UTC m=+646.712659145 I0527 19:49:34.857742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:49:34.857827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:49:34.857849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 19:49:34.857842282 +0000 UTC m=+646.727918976 I0527 19:49:35.009571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:49:35.024137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tbxbc" condition "Approved" to 2026-05-27 19:49:35.024127247 +0000 UTC m=+646.894203941 I0527 19:49:35.045007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tbxbc" condition "Ready" to 2026-05-27 19:49:35.044995236 +0000 UTC m=+646.915071930 I0527 19:49:35.071891 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:49:35.071882289 +0000 UTC m=+646.941958973 I0527 19:49:35.099593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:49:35.099934 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:49:35.09992755 +0000 UTC m=+646.970004234 I0527 19:49:35.120686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:19.150390 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 19:50:19.150376567 +0000 UTC m=+691.020453261 I0527 19:50:19.150766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:50:19.150791 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 19:50:19.150787213 +0000 UTC m=+691.020863897 I0527 19:50:19.182865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:19.183059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:50:19.183142 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 19:50:19.183111457 +0000 UTC m=+691.053188171 I0527 19:50:19.314795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6chlj" condition "Approved" to 2026-05-27 19:50:19.314778566 +0000 UTC m=+691.184855260 I0527 19:50:19.336799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6chlj" condition "Ready" to 2026-05-27 19:50:19.33499152 +0000 UTC m=+691.205068214 I0527 19:50:19.374933 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:50:19.374916791 +0000 UTC m=+691.244993495 I0527 19:50:19.400949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"