I0418 09:06:30.882640 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 09:06:30.882965 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 09:06:30.883216 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 09:06:30.889502 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 09:06:30.889898 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 09:06:30.890073 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 09:06:30.890199 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 09:06:30.893016 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 09:06:30.907843 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 09:06:30.913212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 09:06:30.916744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 09:06:30.921737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 09:06:30.925363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 09:06:30.927953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 09:06:30.930466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 09:06:30.932431 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 09:06:30.934246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 09:06:30.935974 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 09:06:30.936066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 09:06:30.941047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 09:06:30.943753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 09:06:30.945981 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 09:06:30.946086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 09:06:30.948484 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 09:06:30.948577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 09:06:30.951114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 09:06:30.953451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 09:06:30.955995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 09:06:30.957829 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 09:06:30.959554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 09:06:30.959576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 09:06:30.959582 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 09:06:30.959623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 09:06:30.965929 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:30.966209 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:30.966862 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:30.967258 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:30.988073 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:31.031842 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:31.050154 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:31.053757 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:31.074135 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:31.087415 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:06:42.720798 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 09:06:42.72076918 +0000 UTC m=+11.872619286 I0418 09:06:43.546734 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:06:43.546708212 +0000 UTC m=+12.698558328 I0418 09:06:43.546913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:06:43.547078 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:06:43.547016961 +0000 UTC m=+12.698867067 E0418 09:06:43.561515 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:06:43.561597 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 09:06:43.561589115 +0000 UTC m=+12.713439201 E0418 09:06:43.561627 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:06:43.565552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:06:43.565622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:06:43.565679 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:06:43.565674821 +0000 UTC m=+12.717524907 E0418 09:06:43.570045 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 09:06:43.570198 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:06:43.570274 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:06:43.570336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 09:06:43.606076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mbtz4" condition "Approved" to 2026-04-18 09:06:43.606060858 +0000 UTC m=+12.757910944 I0418 09:06:43.622203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mbtz4" condition "Ready" to 2026-04-18 09:06:43.622190266 +0000 UTC m=+12.774040372 I0418 09:06:43.647918 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:06:43.647885706 +0000 UTC m=+12.799735782 I0418 09:06:43.665404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:06:43.665709 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:06:43.665701352 +0000 UTC m=+12.817551438 I0418 09:06:43.682524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:06:43.685217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:06:43.685546 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:06:43.685534965 +0000 UTC m=+12.837385051 I0418 09:06:48.571229 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:06:48.57120539 +0000 UTC m=+17.723055506 I0418 09:07:11.103869 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 09:07:11.103790679 +0000 UTC m=+40.255640785 I0418 09:07:11.104416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:07:11.104453 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:07:11.104446604 +0000 UTC m=+40.256296710 I0418 09:07:11.121110 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 09:07:11.121093073 +0000 UTC m=+40.272943149 I0418 09:07:11.137915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:11.138023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:07:11.138054 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:07:11.138045239 +0000 UTC m=+40.289895325 I0418 09:07:11.341655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:11.349605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k57f9" condition "Approved" to 2026-04-18 09:07:11.34958773 +0000 UTC m=+40.501437806 I0418 09:07:11.381093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k57f9" condition "Ready" to 2026-04-18 09:07:11.381077076 +0000 UTC m=+40.532927142 I0418 09:07:11.406315 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:07:11.40629654 +0000 UTC m=+40.558146626 I0418 09:07:11.426053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:11.426537 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:07:11.42649367 +0000 UTC m=+40.578343756 I0418 09:07:11.451479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:11.453435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:11:22.236935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:11:22.237115 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-18 09:11:22.23695738 +0000 UTC m=+291.388807456 I0418 09:11:22.237425 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-18 09:11:22.236584917 +0000 UTC m=+291.388435023 I0418 09:11:22.256327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:11:22.256391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-18 09:11:22.256384618 +0000 UTC m=+291.408234694 I0418 09:11:22.391272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:11:22.423633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-96rqx" condition "Approved" to 2026-04-18 09:11:22.423610848 +0000 UTC m=+291.575460934 I0418 09:11:22.455214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-96rqx" condition "Ready" to 2026-04-18 09:11:22.455203679 +0000 UTC m=+291.607053765 I0418 09:11:22.481188 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:11:22.48117772 +0000 UTC m=+291.633027826 I0418 09:11:22.504844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.440197 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 09:12:26.44014489 +0000 UTC m=+355.591994966 I0418 09:12:26.440223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:26.440306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:12:26.440281263 +0000 UTC m=+355.592131379 E0418 09:12:26.453905 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:12:26.453999 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 09:12:26.453990103 +0000 UTC m=+355.605840189 E0418 09:12:26.454063 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:12:26.455410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.455485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:26.455507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:12:26.455499604 +0000 UTC m=+355.607349690 E0418 09:12:26.473465 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 09:12:26.473562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:12:26.473754 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:12:26.473856 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 09:12:26.494984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.500186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ks8qx" condition "Approved" to 2026-04-18 09:12:26.500173628 +0000 UTC m=+355.652023724 I0418 09:12:26.512214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ks8qx" condition "Ready" to 2026-04-18 09:12:26.512207062 +0000 UTC m=+355.664057148 I0418 09:12:26.536609 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:26.536592589 +0000 UTC m=+355.688442695 I0418 09:12:26.573547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.577616 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:26.577604514 +0000 UTC m=+355.729454580 I0418 09:12:26.609618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.613533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:26.627738 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:26.627729886 +0000 UTC m=+355.779579952 I0418 09:12:31.474743 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:31.47473064 +0000 UTC m=+360.626580746 I0418 09:13:12.683882 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:13:12.683873261 +0000 UTC m=+401.835723337 I0418 09:13:12.685505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:12.685544 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 09:13:12.68553749 +0000 UTC m=+401.837387566 I0418 09:13:12.685694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 09:13:12.685688304 +0000 UTC m=+401.837538380 I0418 09:13:12.685845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:12.685862 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:13:12.685859278 +0000 UTC m=+401.837709354 I0418 09:13:12.698857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:12.698884 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:13:12.698879487 +0000 UTC m=+401.850729563 I0418 09:13:12.699067 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 09:13:12.699064001 +0000 UTC m=+401.850914077 I0418 09:13:12.737687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:12.737871 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:13:12.737844211 +0000 UTC m=+401.889694297 I0418 09:13:12.748794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:12.748902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:12.748927 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:13:12.748920944 +0000 UTC m=+401.900771020 I0418 09:13:12.750803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:12.750848 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 09:13:12.750835119 +0000 UTC m=+401.902685195 I0418 09:13:12.953769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:12.953852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:12.957489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tcjpr" condition "Approved" to 2026-04-18 09:13:12.957477791 +0000 UTC m=+402.109327867 I0418 09:13:12.980917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tcjpr" condition "Ready" to 2026-04-18 09:13:12.980907017 +0000 UTC m=+402.132757083 I0418 09:13:13.013292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:13.014920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2t6pf" condition "Approved" to 2026-04-18 09:13:13.014910573 +0000 UTC m=+402.166760649 I0418 09:13:13.026912 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:13.026897667 +0000 UTC m=+402.178747743 I0418 09:13:13.065827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2t6pf" condition "Ready" to 2026-04-18 09:13:13.065818308 +0000 UTC m=+402.217668374 I0418 09:13:13.108752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:13.108947 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:13.108940349 +0000 UTC m=+402.260790415 I0418 09:13:13.156668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sw9pg" condition "Approved" to 2026-04-18 09:13:13.156660938 +0000 UTC m=+402.308511014 I0418 09:13:13.170873 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:13.170866444 +0000 UTC m=+402.322716530 I0418 09:13:13.229440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:13.343894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sw9pg" condition "Ready" to 2026-04-18 09:13:13.343875918 +0000 UTC m=+402.495726004 I0418 09:13:13.679300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:13.679823 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:13.679816158 +0000 UTC m=+402.831666244 I0418 09:13:14.128808 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:14.128797805 +0000 UTC m=+403.280647871 I0418 09:13:14.175013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:14.225490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:14.327378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:20.449352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:20.449435 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" condition "Issuing" to 2026-04-18 09:13:20.449422952 +0000 UTC m=+409.601273048 I0418 09:13:20.449823 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" condition "Ready" to 2026-04-18 09:13:20.449817661 +0000 UTC m=+409.601667747 I0418 09:13:20.474162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:20.474226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" condition "Ready" to 2026-04-18 09:13:20.474218109 +0000 UTC m=+409.626068175 I0418 09:13:20.898181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:20.942090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pbhwp-qpzdx" condition "Approved" to 2026-04-18 09:13:20.942079196 +0000 UTC m=+410.093929262 I0418 09:13:20.962769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pbhwp-qpzdx" condition "Ready" to 2026-04-18 09:13:20.962757557 +0000 UTC m=+410.114607643 I0418 09:13:20.999282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:20.999267467 +0000 UTC m=+410.151117543 I0418 09:13:21.022081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbhwp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:31.879789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:31.879824 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:13:31.879813618 +0000 UTC m=+421.031663704 I0418 09:13:31.880035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 09:13:31.880030253 +0000 UTC m=+421.031880339 I0418 09:13:31.895281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:31.895408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:31.895492 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:13:31.895486804 +0000 UTC m=+421.047336890 I0418 09:13:32.110255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b97gc" condition "Approved" to 2026-04-18 09:13:32.110234921 +0000 UTC m=+421.262085007 I0418 09:13:32.127159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b97gc" condition "Ready" to 2026-04-18 09:13:32.127144474 +0000 UTC m=+421.278994550 I0418 09:13:32.165288 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:32.165274088 +0000 UTC m=+421.317124174 I0418 09:13:32.187405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:32.187839 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:32.187832428 +0000 UTC m=+421.339682524 I0418 09:13:32.196915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:32.208001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.316491 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:16:53.31647342 +0000 UTC m=+622.468323506 I0418 09:16:53.316618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:16:53.316687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 09:16:53.316681173 +0000 UTC m=+622.468531239 I0418 09:16:53.338533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.338609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:16:53.338600919 +0000 UTC m=+622.490451005 I0418 09:16:53.535901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.568943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lwhcs" condition "Approved" to 2026-04-18 09:16:53.568930993 +0000 UTC m=+622.720781069 I0418 09:16:53.586665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lwhcs" condition "Ready" to 2026-04-18 09:16:53.586656145 +0000 UTC m=+622.738506221 I0418 09:16:53.616411 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:16:53.616400969 +0000 UTC m=+622.768251055 I0418 09:16:53.646266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.646953 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:16:53.646943726 +0000 UTC m=+622.798793812 I0418 09:16:53.648748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.674313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:16:53.674772 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:16:53.674763306 +0000 UTC m=+622.826613392 I0418 09:17:33.575109 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-18 09:17:33.575099787 +0000 UTC m=+662.726949863 I0418 09:17:33.575368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:17:33.575383 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 09:17:33.575380242 +0000 UTC m=+662.727230318 I0418 09:17:33.597231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:33.597353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:17:33.597410 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 09:17:33.597403052 +0000 UTC m=+662.749253148 I0418 09:17:34.148721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:34.163473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6dvcp" condition "Approved" to 2026-04-18 09:17:34.163462444 +0000 UTC m=+663.315312520 I0418 09:17:34.184670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6dvcp" condition "Ready" to 2026-04-18 09:17:34.18466013 +0000 UTC m=+663.336510216 I0418 09:17:34.208847 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:17:34.208837126 +0000 UTC m=+663.360687202 I0418 09:17:34.241219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:34.241680 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:17:34.241672902 +0000 UTC m=+663.393522988 I0418 09:17:34.258384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"