I0505 06:48:17.138269 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 06:48:17.138414 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 06:48:17.138535 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 06:48:17.143394 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 06:48:17.143829 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 06:48:17.143910 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 06:48:17.143914 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 06:48:17.146255 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 06:48:17.160971 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 06:48:17.165803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 06:48:17.171723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 06:48:17.174842 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 06:48:17.174877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 06:48:17.174881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 06:48:17.177055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 06:48:17.179190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 06:48:17.181329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 06:48:17.183499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 06:48:17.185765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 06:48:17.188620 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 06:48:17.188648 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 06:48:17.188780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 06:48:17.193873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 06:48:17.197878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 06:48:17.200605 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 06:48:17.200767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 06:48:17.202962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 06:48:17.205004 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 06:48:17.205109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 06:48:17.207084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 06:48:17.208899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 06:48:17.210651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 06:48:17.212328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 06:48:17.217441 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.217848 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.219086 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.219566 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.233422 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.248228 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.271627 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.276905 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.294807 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:17.303368 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 06:48:28.740246 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 06:48:28.740226203 +0000 UTC m=+11.634981643 I0505 06:48:29.522216 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 06:48:29.522204422 +0000 UTC m=+12.416959832 I0505 06:48:29.522243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:48:29.522545 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 06:48:29.522529011 +0000 UTC m=+12.417284481 E0505 06:48:29.537830 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 06:48:29.537905 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 06:48:29.53789727 +0000 UTC m=+12.432652680 E0505 06:48:29.537929 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 06:48:29.538309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:29.538343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:48:29.538356 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 06:48:29.538351873 +0000 UTC m=+12.433107273 E0505 06:48:29.550827 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 06:48:29.551050 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 06:48:29.551838 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 06:48:29.552077 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 06:48:29.577762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:29.581100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x6dcq" condition "Approved" to 2026-05-05 06:48:29.581074443 +0000 UTC m=+12.475829873 I0505 06:48:29.595779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x6dcq" condition "Ready" to 2026-05-05 06:48:29.595761803 +0000 UTC m=+12.490517243 I0505 06:48:29.649208 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:48:29.648962062 +0000 UTC m=+12.543717492 I0505 06:48:29.715891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:29.716274 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:48:29.716267323 +0000 UTC m=+12.611022733 I0505 06:48:29.731418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:29.731905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:29.732127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:48:29.732120585 +0000 UTC m=+12.626875985 I0505 06:48:34.552176 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:48:34.552155905 +0000 UTC m=+17.446911345 I0505 06:48:56.585772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:48:56.585806 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 06:48:56.585799167 +0000 UTC m=+39.480554577 I0505 06:48:56.586304 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 06:48:56.58629851 +0000 UTC m=+39.481053920 I0505 06:48:56.601486 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 06:48:56.601474601 +0000 UTC m=+39.496230011 I0505 06:48:56.621033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:56.621095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:48:56.621121 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 06:48:56.62111588 +0000 UTC m=+39.515871280 I0505 06:48:56.956877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-snln6" condition "Approved" to 2026-05-05 06:48:56.956865005 +0000 UTC m=+39.851620435 I0505 06:48:56.988531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-snln6" condition "Ready" to 2026-05-05 06:48:56.988518921 +0000 UTC m=+39.883274331 I0505 06:48:57.025972 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:48:57.025962229 +0000 UTC m=+39.920717629 I0505 06:48:57.053275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:48:57.109166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:53:01.195396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:53:01.195447 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-05-05 06:53:01.195435771 +0000 UTC m=+284.090191221 I0505 06:53:01.196031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-05-05 06:53:01.196014992 +0000 UTC m=+284.090770402 I0505 06:53:01.213522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:53:01.213559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-05-05 06:53:01.21355461 +0000 UTC m=+284.108310000 I0505 06:53:01.368200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:53:01.394949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-t22cx" condition "Approved" to 2026-05-05 06:53:01.394905073 +0000 UTC m=+284.289660493 I0505 06:53:01.423588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-t22cx" condition "Ready" to 2026-05-05 06:53:01.42357184 +0000 UTC m=+284.318327280 I0505 06:53:01.461722 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:53:01.461704676 +0000 UTC m=+284.356460096 I0505 06:53:01.481099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:53:01.481873 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:53:01.481862574 +0000 UTC m=+284.376617984 I0505 06:53:01.494915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:53:01.504501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.378590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:07.378642 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 06:54:07.3786301 +0000 UTC m=+350.273385540 I0505 06:54:07.379156 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 06:54:07.37914646 +0000 UTC m=+350.273901900 E0505 06:54:07.393451 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 06:54:07.393499 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 06:54:07.393491642 +0000 UTC m=+350.288247042 E0505 06:54:07.393553 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 06:54:07.395444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.395551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:07.395570 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 06:54:07.395566038 +0000 UTC m=+350.290321428 E0505 06:54:07.431285 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 06:54:07.431614 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 06:54:07.431743 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 06:54:07.431862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 06:54:07.454467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.459685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jtstj" condition "Approved" to 2026-05-05 06:54:07.459674407 +0000 UTC m=+350.354429827 I0505 06:54:07.474460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jtstj" condition "Ready" to 2026-05-05 06:54:07.474452378 +0000 UTC m=+350.369207788 I0505 06:54:07.496908 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:07.496900146 +0000 UTC m=+350.391655556 I0505 06:54:07.518069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.518628 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:07.518618732 +0000 UTC m=+350.413374142 I0505 06:54:07.530102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.546823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:07.547315 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:07.547298705 +0000 UTC m=+350.442054145 I0505 06:54:07.548537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:12.434619 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:12.434091997 +0000 UTC m=+355.328847437 I0505 06:54:55.815013 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 06:54:55.8148868 +0000 UTC m=+398.709642210 I0505 06:54:55.815206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:55.815258 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 06:54:55.815246887 +0000 UTC m=+398.710002287 I0505 06:54:55.815675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:55.815697 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 06:54:55.815693405 +0000 UTC m=+398.710448805 I0505 06:54:55.815865 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 06:54:55.815860497 +0000 UTC m=+398.710615897 I0505 06:54:55.876500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:55.876542 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 06:54:55.876535609 +0000 UTC m=+398.771291009 I0505 06:54:55.876622 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 06:54:55.876419807 +0000 UTC m=+398.771175207 I0505 06:54:55.878095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:55.878182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 06:54:55.878178618 +0000 UTC m=+398.772934018 I0505 06:54:55.878193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:55.878425 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 06:54:55.878416412 +0000 UTC m=+398.773171832 I0505 06:54:55.908917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:55.909005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:54:55.909037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 06:54:55.909026403 +0000 UTC m=+398.803781833 I0505 06:54:56.076808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.154195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w84j8" condition "Approved" to 2026-05-05 06:54:56.154177181 +0000 UTC m=+399.048932631 I0505 06:54:56.181331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.183649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w84j8" condition "Ready" to 2026-05-05 06:54:56.18363738 +0000 UTC m=+399.078392780 I0505 06:54:56.228745 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:56.22872564 +0000 UTC m=+399.123481050 I0505 06:54:56.287666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lrff8" condition "Approved" to 2026-05-05 06:54:56.2876469 +0000 UTC m=+399.182402330 I0505 06:54:56.292228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.293805 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:56.293791711 +0000 UTC m=+399.188547151 I0505 06:54:56.343033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lrff8" condition "Ready" to 2026-05-05 06:54:56.343020865 +0000 UTC m=+399.237776275 I0505 06:54:56.347457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.355725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.413534 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:56.413518112 +0000 UTC m=+399.308273542 I0505 06:54:56.510402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.512270 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:56.512251908 +0000 UTC m=+399.407007318 I0505 06:54:56.797744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:54:56.870026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j9rq5" condition "Approved" to 2026-05-05 06:54:56.870005709 +0000 UTC m=+399.764761109 I0505 06:54:57.215296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j9rq5" condition "Ready" to 2026-05-05 06:54:57.215282256 +0000 UTC m=+400.110037666 I0505 06:54:57.557548 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-j9rq5" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-jq86q" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0505 06:54:57.703427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zmrg6" condition "Approved" to 2026-05-05 06:54:57.703410359 +0000 UTC m=+400.598165769 I0505 06:54:57.859745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zmrg6" condition "Ready" to 2026-05-05 06:54:57.859729669 +0000 UTC m=+400.754485079 I0505 06:54:58.246884 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:54:58.246852045 +0000 UTC m=+401.141607445 I0505 06:54:58.347949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:04.132481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:55:04.132531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" condition "Issuing" to 2026-05-05 06:55:04.132520482 +0000 UTC m=+407.027275882 I0505 06:55:04.132904 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" condition "Ready" to 2026-05-05 06:55:04.132883658 +0000 UTC m=+407.027639048 I0505 06:55:04.150445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:04.150516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:55:04.150533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" condition "Issuing" to 2026-05-05 06:55:04.150526954 +0000 UTC m=+407.045282364 I0505 06:55:04.327827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wr8p4-8s4vl" condition "Approved" to 2026-05-05 06:55:04.327808796 +0000 UTC m=+407.222564196 I0505 06:55:04.356385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wr8p4-8s4vl" condition "Ready" to 2026-05-05 06:55:04.356373049 +0000 UTC m=+407.251128459 I0505 06:55:04.386909 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:55:04.386895867 +0000 UTC m=+407.281651277 I0505 06:55:04.415177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wr8p4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:17.250563 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 06:55:17.250493785 +0000 UTC m=+420.145249195 I0505 06:55:17.251335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:55:17.251446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 06:55:17.251432032 +0000 UTC m=+420.146187442 I0505 06:55:17.269777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:17.270386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:55:17.270439 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 06:55:17.270411932 +0000 UTC m=+420.165167342 I0505 06:55:17.822931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:17.840136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ct54g" condition "Approved" to 2026-05-05 06:55:17.840106087 +0000 UTC m=+420.734861527 I0505 06:55:17.887012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ct54g" condition "Ready" to 2026-05-05 06:55:17.886997436 +0000 UTC m=+420.781752856 I0505 06:55:17.923319 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:55:17.923306806 +0000 UTC m=+420.818062216 I0505 06:55:17.942742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:55:17.942998 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:55:17.942990488 +0000 UTC m=+420.837745888 I0505 06:55:17.967922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:58:28.813215 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 06:58:28.813200135 +0000 UTC m=+611.707955545 I0505 06:58:28.812993 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:58:28.814289 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 06:58:28.814270865 +0000 UTC m=+611.709026315 I0505 06:58:28.830332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:58:28.830434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:58:28.830457 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 06:58:28.830449141 +0000 UTC m=+611.725204561 I0505 06:58:29.137821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hjmrr" condition "Approved" to 2026-05-05 06:58:29.1378077 +0000 UTC m=+612.032563100 I0505 06:58:29.158998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hjmrr" condition "Ready" to 2026-05-05 06:58:29.158983886 +0000 UTC m=+612.053739296 I0505 06:58:29.193005 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:58:29.192985253 +0000 UTC m=+612.087740663 I0505 06:58:29.214545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:59:08.010645 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 06:59:08.010595875 +0000 UTC m=+650.905351295 I0505 06:59:08.011172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:59:08.011236 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 06:59:08.011221652 +0000 UTC m=+650.905977102 I0505 06:59:08.032286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:59:08.032410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 06:59:08.032450 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 06:59:08.032444533 +0000 UTC m=+650.927199933 I0505 06:59:08.167734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:59:08.172790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t4c2j" condition "Approved" to 2026-05-05 06:59:08.17278089 +0000 UTC m=+651.067536300 I0505 06:59:08.192936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t4c2j" condition "Ready" to 2026-05-05 06:59:08.192921371 +0000 UTC m=+651.087676761 I0505 06:59:08.225968 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:59:08.225951701 +0000 UTC m=+651.120707111 I0505 06:59:08.252957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 06:59:08.253331 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 06:59:08.253322977 +0000 UTC m=+651.148078367 I0505 06:59:08.277381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"