I0428 13:46:38.063109 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 13:46:38.063235 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 13:46:38.063308 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 13:46:38.066646 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 13:46:38.067074 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 13:46:38.067188 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 13:46:38.067294 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 13:46:38.074031 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 13:46:38.088084 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 13:46:38.091781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 13:46:38.094367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 13:46:38.096908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 13:46:38.099865 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 13:46:38.101251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 13:46:38.103785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 13:46:38.107067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 13:46:38.108908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 13:46:38.110794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 13:46:38.112637 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 13:46:38.112664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 13:46:38.114723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 13:46:38.116689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 13:46:38.118473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 13:46:38.120353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 13:46:38.126743 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 13:46:38.126791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 13:46:38.126820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 13:46:38.129505 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 13:46:38.129538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 13:46:38.132205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 13:46:38.134609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 13:46:38.137108 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 13:46:38.137163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 13:46:38.140758 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.141316 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.141603 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.141964 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.171135 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.179733 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.195766 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.208176 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.225423 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:38.229642 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:46:49.125343 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 13:46:49.125322355 +0000 UTC m=+11.101099121 I0428 13:46:49.987839 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 13:46:49.987820101 +0000 UTC m=+11.963596877 I0428 13:46:49.988183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:46:49.988269 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:46:49.988257916 +0000 UTC m=+11.964034682 E0428 13:46:50.007704 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:46:50.007792 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 13:46:50.00778037 +0000 UTC m=+11.983557136 E0428 13:46:50.008623 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:46:50.012388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:46:50.012579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:46:50.012622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:46:50.012612576 +0000 UTC m=+11.988389342 E0428 13:46:50.024894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 13:46:50.025101 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:46:50.025152 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:46:50.025249 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 13:46:50.057758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2mb7v" condition "Approved" to 2026-04-28 13:46:50.057744383 +0000 UTC m=+12.033521169 I0428 13:46:50.072408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2mb7v" condition "Ready" to 2026-04-28 13:46:50.07239372 +0000 UTC m=+12.048170456 I0428 13:46:50.102411 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:46:50.102393645 +0000 UTC m=+12.078170401 I0428 13:46:50.125142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:46:50.125652 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:46:50.125642287 +0000 UTC m=+12.101419033 I0428 13:46:50.142828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:46:50.143261 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:46:50.143251945 +0000 UTC m=+12.119028681 I0428 13:46:55.026015 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:46:55.026000454 +0000 UTC m=+17.001777200 I0428 13:47:18.537050 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 13:47:18.536448448 +0000 UTC m=+40.512225194 I0428 13:47:18.538135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:47:18.538250 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:47:18.538237699 +0000 UTC m=+40.514014465 I0428 13:47:18.568154 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 13:47:18.568137328 +0000 UTC m=+40.543914064 I0428 13:47:18.572087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:47:18.572159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:47:18.572183 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:47:18.572173625 +0000 UTC m=+40.547950381 I0428 13:47:18.716331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:47:18.722979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vj8kj" condition "Approved" to 2026-04-28 13:47:18.722964213 +0000 UTC m=+40.698740959 I0428 13:47:18.756415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vj8kj" condition "Ready" to 2026-04-28 13:47:18.756401813 +0000 UTC m=+40.732178549 I0428 13:47:18.799156 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:47:18.799137491 +0000 UTC m=+40.774914247 I0428 13:47:18.830895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:47:18.831315 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:47:18.831306936 +0000 UTC m=+40.807083682 I0428 13:47:18.854191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:47:18.854569 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:47:18.854560307 +0000 UTC m=+40.830337033 I0428 13:52:39.099851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:52:39.099899 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-04-28 13:52:39.099888278 +0000 UTC m=+361.075665034 I0428 13:52:39.100477 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-04-28 13:52:39.100468866 +0000 UTC m=+361.076245622 I0428 13:52:39.162867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:52:39.162953 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-04-28 13:52:39.16294421 +0000 UTC m=+361.138720946 I0428 13:52:39.405949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:52:39.479227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-ltt8s" condition "Approved" to 2026-04-28 13:52:39.479208907 +0000 UTC m=+361.454985673 I0428 13:52:39.516763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-ltt8s" condition "Ready" to 2026-04-28 13:52:39.516743628 +0000 UTC m=+361.492520404 I0428 13:52:39.588539 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:52:39.588523764 +0000 UTC m=+361.564300500 I0428 13:52:39.642423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:50.541343 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:53:50.541324979 +0000 UTC m=+432.517101735 I0428 13:53:50.541822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:53:50.541898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 13:53:50.541891226 +0000 UTC m=+432.517667962 E0428 13:53:50.555094 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:53:50.555148 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 13:53:50.555137133 +0000 UTC m=+432.530913889 E0428 13:53:50.555206 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:53:50.561134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:50.561207 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:53:50.561198899 +0000 UTC m=+432.536975645 E0428 13:53:50.571795 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 13:53:50.571859 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:53:50.571881 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:53:50.571907 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 13:53:50.576487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:50.576578 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:53:50.576571263 +0000 UTC m=+432.552347999 I0428 13:53:50.577611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kbzdj" condition "Approved" to 2026-04-28 13:53:50.577598026 +0000 UTC m=+432.553374772 I0428 13:53:50.587065 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:53:50.586980624 +0000 UTC m=+432.562757380 I0428 13:53:50.591297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kbzdj" condition "Ready" to 2026-04-28 13:53:50.591277268 +0000 UTC m=+432.567054054 I0428 13:53:50.595206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:50.614180 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:50.614166896 +0000 UTC m=+432.589943642 I0428 13:53:50.632350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:50.682928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:55.572905 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:55.572888825 +0000 UTC m=+437.548665601 I0428 13:54:37.521479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.521554 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 13:54:37.52153796 +0000 UTC m=+479.497314696 I0428 13:54:37.521930 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 13:54:37.521914305 +0000 UTC m=+479.497691041 I0428 13:54:37.534484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.534526 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 13:54:37.534517526 +0000 UTC m=+479.510294262 I0428 13:54:37.534801 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 13:54:37.534782529 +0000 UTC m=+479.510559265 I0428 13:54:37.543862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 13:54:37.543839367 +0000 UTC m=+479.519616103 I0428 13:54:37.544072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.544126 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:54:37.54411716 +0000 UTC m=+479.519893896 I0428 13:54:37.570099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.571092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.571154 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 13:54:37.571142533 +0000 UTC m=+479.546919279 I0428 13:54:37.588119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.588228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.588259 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 13:54:37.588250007 +0000 UTC m=+479.564026753 I0428 13:54:37.594891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.594999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:37.595037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:54:37.595030108 +0000 UTC m=+479.570806834 I0428 13:54:37.759542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x75ww" condition "Approved" to 2026-04-28 13:54:37.759525191 +0000 UTC m=+479.735301927 I0428 13:54:37.777516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x75ww" condition "Ready" to 2026-04-28 13:54:37.777502786 +0000 UTC m=+479.753279512 I0428 13:54:37.807925 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:37.807909049 +0000 UTC m=+479.783685785 I0428 13:54:37.852765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.853181 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:37.853170929 +0000 UTC m=+479.828947665 I0428 13:54:37.906798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.909725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lt65r" condition "Approved" to 2026-04-28 13:54:37.909710035 +0000 UTC m=+479.885486781 I0428 13:54:37.919055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:37.919458 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:37.919448501 +0000 UTC m=+479.895225227 I0428 13:54:37.933633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lt65r" condition "Ready" to 2026-04-28 13:54:37.93361344 +0000 UTC m=+479.909390186 I0428 13:54:37.979414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4lmcb" condition "Approved" to 2026-04-28 13:54:37.979397786 +0000 UTC m=+479.955174552 I0428 13:54:38.016940 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:38.016921744 +0000 UTC m=+479.992698520 I0428 13:54:38.324816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4lmcb" condition "Ready" to 2026-04-28 13:54:38.324803306 +0000 UTC m=+480.300580042 I0428 13:54:38.462090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:38.462645 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:38.462634829 +0000 UTC m=+480.438411605 E0428 13:54:38.512353 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-rndbh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0428 13:54:38.862614 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:38.862602259 +0000 UTC m=+480.838379005 I0428 13:54:38.911170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:39.012567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:39.013051 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:39.013040383 +0000 UTC m=+480.988817159 I0428 13:54:39.311102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:39.361992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:18.693432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:18.693487 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" condition "Issuing" to 2026-04-28 13:55:18.693473572 +0000 UTC m=+520.669250348 I0428 13:55:18.694101 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" condition "Ready" to 2026-04-28 13:55:18.69409226 +0000 UTC m=+520.669869026 I0428 13:55:18.708495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvl46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:18.708550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:18.708566 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" condition "Issuing" to 2026-04-28 13:55:18.708561157 +0000 UTC m=+520.684337903 I0428 13:55:18.879694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvl46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:18.889398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvl46-t7f2l" condition "Approved" to 2026-04-28 13:55:18.889382392 +0000 UTC m=+520.865159128 I0428 13:55:18.908978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvl46-t7f2l" condition "Ready" to 2026-04-28 13:55:18.908961158 +0000 UTC m=+520.884737904 I0428 13:55:18.939735 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:18.939722574 +0000 UTC m=+520.915499310 I0428 13:55:18.968865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvl46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvl46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:39.868196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:39.868223 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 13:55:39.86821658 +0000 UTC m=+541.843993316 I0428 13:55:39.869434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 13:55:39.869429074 +0000 UTC m=+541.845205820 I0428 13:55:39.885220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:39.885296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:39.885310 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 13:55:39.885305004 +0000 UTC m=+541.861081740 I0428 13:55:40.106692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fl52f" condition "Approved" to 2026-04-28 13:55:40.106679532 +0000 UTC m=+542.082456268 I0428 13:55:40.123975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fl52f" condition "Ready" to 2026-04-28 13:55:40.123965838 +0000 UTC m=+542.099742574 I0428 13:55:40.158286 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:40.158273649 +0000 UTC m=+542.134050385 I0428 13:55:40.185507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:40.185917 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:40.185911273 +0000 UTC m=+542.161688009 I0428 13:55:40.204745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:40.205052 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:40.2050258 +0000 UTC m=+542.180802536 I0428 13:58:46.609350 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 13:58:46.609332136 +0000 UTC m=+728.585108882 I0428 13:58:46.609668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:58:46.609744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 13:58:46.609733895 +0000 UTC m=+728.585510651 I0428 13:58:46.629200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:46.629432 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 13:58:46.629423261 +0000 UTC m=+728.605199997 I0428 13:58:47.024824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:47.070804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jvkxf" condition "Approved" to 2026-04-28 13:58:47.070784402 +0000 UTC m=+729.046561178 I0428 13:58:47.094031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jvkxf" condition "Ready" to 2026-04-28 13:58:47.094014555 +0000 UTC m=+729.069791321 I0428 13:58:47.129835 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:58:47.129820664 +0000 UTC m=+729.105597410 I0428 13:58:47.160553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:47.161135 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:58:47.16112698 +0000 UTC m=+729.136903726 I0428 13:58:47.174308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:47.177637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:47.178023 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:58:47.178014093 +0000 UTC m=+729.153790829 I0428 13:59:47.080475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:59:47.080557 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 13:59:47.080547713 +0000 UTC m=+789.056324459 I0428 13:59:47.081080 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 13:59:47.081074064 +0000 UTC m=+789.056850810 I0428 13:59:47.108068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:47.108124 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 13:59:47.108120361 +0000 UTC m=+789.083897097 I0428 13:59:47.284457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:47.329956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-92sjx" condition "Approved" to 2026-04-28 13:59:47.329940401 +0000 UTC m=+789.305717157 I0428 13:59:47.350683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-92sjx" condition "Ready" to 2026-04-28 13:59:47.350667566 +0000 UTC m=+789.326444312 I0428 13:59:47.381782 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:59:47.381769704 +0000 UTC m=+789.357546450 I0428 13:59:47.404472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:47.405850 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:59:47.405835534 +0000 UTC m=+789.381612280 I0428 13:59:47.428161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:47.433218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"