I0701 07:20:04.987964 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0701 07:20:04.988155 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0701 07:20:04.988375 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0701 07:20:04.991380 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0701 07:20:04.991840 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0701 07:20:04.991985 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0701 07:20:04.992030 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0701 07:20:04.994599 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0701 07:20:05.008428 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0701 07:20:05.017055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0701 07:20:05.019960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0701 07:20:05.022341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0701 07:20:05.022441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0701 07:20:05.024761 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0701 07:20:05.027548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0701 07:20:05.029196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0701 07:20:05.035658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0701 07:20:05.038535 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0701 07:20:05.038580 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0701 07:20:05.038628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0701 07:20:05.041481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0701 07:20:05.044036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0701 07:20:05.046748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0701 07:20:05.048867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0701 07:20:05.050683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0701 07:20:05.052648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0701 07:20:05.058485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0701 07:20:05.060121 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0701 07:20:05.060143 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0701 07:20:05.060204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0701 07:20:05.061934 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0701 07:20:05.062085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0701 07:20:05.064286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0701 07:20:05.068779 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.069016 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.069557 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.088959 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.103879 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.120435 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.134609 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.151794 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.173370 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:05.177192 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:20:17.833410 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-01 07:20:17.833393877 +0000 UTC m=+12.875319502 I0701 07:20:18.529489 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:20:18.529479851 +0000 UTC m=+13.571405436 I0701 07:20:18.529573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:20:18.530023 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-01 07:20:18.530012425 +0000 UTC m=+13.571938040 E0701 07:20:18.543708 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:20:18.543771 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-01 07:20:18.54376237 +0000 UTC m=+13.585687965 E0701 07:20:18.543795 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:20:18.551272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:20:18.551409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:20:18.552094 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-01 07:20:18.552084725 +0000 UTC m=+13.594010320 E0701 07:20:18.555047 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0701 07:20:18.555132 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:20:18.555170 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:20:18.555196 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0701 07:20:18.601530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:20:18.603356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ztbtw" condition "Approved" to 2026-07-01 07:20:18.603340257 +0000 UTC m=+13.645265872 I0701 07:20:18.621815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ztbtw" condition "Ready" to 2026-07-01 07:20:18.621803414 +0000 UTC m=+13.663729019 I0701 07:20:18.647811 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:20:18.647793595 +0000 UTC m=+13.689719200 I0701 07:20:18.664180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:20:23.555979 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:20:23.555968316 +0000 UTC m=+18.597893911 I0701 07:20:43.704668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:20:43.704772 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-01 07:20:43.704756252 +0000 UTC m=+38.746681847 I0701 07:20:43.704722 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-01 07:20:43.704711771 +0000 UTC m=+38.746637366 I0701 07:20:43.718413 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-01 07:20:43.718402355 +0000 UTC m=+38.760327940 I0701 07:20:43.733409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:20:43.733621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:20:43.733663 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-01 07:20:43.733655874 +0000 UTC m=+38.775581459 I0701 07:20:44.028510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:20:44.035625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rndmt" condition "Approved" to 2026-07-01 07:20:44.035614191 +0000 UTC m=+39.077539786 I0701 07:20:44.073950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rndmt" condition "Ready" to 2026-07-01 07:20:44.073936308 +0000 UTC m=+39.115861903 I0701 07:20:44.104629 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:20:44.104616747 +0000 UTC m=+39.146542342 I0701 07:20:44.132383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:24:58.455582 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-07-01 07:24:58.455565678 +0000 UTC m=+293.497491303 I0701 07:24:58.455681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:24:58.455759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-07-01 07:24:58.455750382 +0000 UTC m=+293.497676007 I0701 07:24:58.473692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:24:58.473774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-07-01 07:24:58.473765774 +0000 UTC m=+293.515691369 I0701 07:24:58.608080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:24:58.638699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-kj65w" condition "Approved" to 2026-07-01 07:24:58.638686066 +0000 UTC m=+293.680611671 I0701 07:24:58.668634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-kj65w" condition "Ready" to 2026-07-01 07:24:58.668622934 +0000 UTC m=+293.710548529 I0701 07:24:58.692429 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:24:58.692414284 +0000 UTC m=+293.734339879 I0701 07:24:58.713326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:24:58.713616 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:24:58.713612263 +0000 UTC m=+293.755537848 I0701 07:24:58.731494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:24:58.732007 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:24:58.731998543 +0000 UTC m=+293.773924168 I0701 07:24:58.739039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.688250 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-01 07:25:58.688226511 +0000 UTC m=+353.730152106 I0701 07:25:58.688483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:25:58.688591 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-01 07:25:58.688576779 +0000 UTC m=+353.730502394 E0701 07:25:58.703998 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:25:58.704044 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-01 07:25:58.704033566 +0000 UTC m=+353.745959201 E0701 07:25:58.704286 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:25:58.707485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.707565 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-01 07:25:58.707557911 +0000 UTC m=+353.749483516 E0701 07:25:58.721264 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0701 07:25:58.721647 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:25:58.721705 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:25:58.721776 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0701 07:25:58.725978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.745438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2pxrr" condition "Approved" to 2026-07-01 07:25:58.745424412 +0000 UTC m=+353.787350007 I0701 07:25:58.758891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2pxrr" condition "Ready" to 2026-07-01 07:25:58.758877176 +0000 UTC m=+353.800802791 I0701 07:25:58.778932 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:25:58.778914691 +0000 UTC m=+353.820840286 I0701 07:25:58.798460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.798862 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:25:58.798784121 +0000 UTC m=+353.840709716 I0701 07:25:58.804742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.812160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:25:58.812297 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:25:58.812291677 +0000 UTC m=+353.854217262 I0701 07:26:03.721775 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:03.721762732 +0000 UTC m=+358.763688327 I0701 07:26:45.622918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:45.622988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:26:45.622981769 +0000 UTC m=+400.664907364 I0701 07:26:45.623595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:45.623681 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-01 07:26:45.623672922 +0000 UTC m=+400.665598517 I0701 07:26:45.624356 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-01 07:26:45.624345316 +0000 UTC m=+400.666270901 I0701 07:26:45.624757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:45.624776 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:26:45.624773234 +0000 UTC m=+400.666698819 I0701 07:26:45.624888 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-01 07:26:45.624885266 +0000 UTC m=+400.666810851 I0701 07:26:45.625308 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:26:45.625301234 +0000 UTC m=+400.667226839 I0701 07:26:45.681352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:45.681403 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:26:45.681396661 +0000 UTC m=+400.723322246 I0701 07:26:45.681624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:45.681672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:45.681672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:45.681719 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:26:45.681715717 +0000 UTC m=+400.723641302 I0701 07:26:45.681727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:45.681742 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:26:45.681738608 +0000 UTC m=+400.723664193 I0701 07:26:45.965201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.033266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n9w4s" condition "Approved" to 2026-07-01 07:26:46.03324725 +0000 UTC m=+401.075172845 I0701 07:26:46.066138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n9w4s" condition "Ready" to 2026-07-01 07:26:46.066120107 +0000 UTC m=+401.108045692 I0701 07:26:46.093451 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:46.093443026 +0000 UTC m=+401.135368611 I0701 07:26:46.094186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.104524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lcm6v" condition "Approved" to 2026-07-01 07:26:46.103107876 +0000 UTC m=+401.145033461 I0701 07:26:46.129526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.135363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lcm6v" condition "Ready" to 2026-07-01 07:26:46.135354281 +0000 UTC m=+401.177279866 E0701 07:26:46.138541 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-kxb6b\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0701 07:26:46.207748 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:46.207737527 +0000 UTC m=+401.249663102 I0701 07:26:46.234583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.234826 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:46.234820061 +0000 UTC m=+401.276745646 I0701 07:26:46.344694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.499661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:46.792018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9r8jp" condition "Approved" to 2026-07-01 07:26:46.792008285 +0000 UTC m=+401.833933880 I0701 07:26:47.069901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9r8jp" condition "Ready" to 2026-07-01 07:26:47.069891197 +0000 UTC m=+402.111816782 I0701 07:26:47.494375 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-9r8jp" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-g2s9n" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0701 07:26:47.517539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8s64" condition "Approved" to 2026-07-01 07:26:47.517519224 +0000 UTC m=+402.559444849 I0701 07:26:47.611718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8s64" condition "Ready" to 2026-07-01 07:26:47.611706677 +0000 UTC m=+402.653632272 I0701 07:26:48.049283 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:48.049268974 +0000 UTC m=+403.091194579 I0701 07:26:48.150759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:48.151113 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:48.151106704 +0000 UTC m=+403.193032289 I0701 07:26:48.395045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:48.445947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:55.429113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:55.429163 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" condition "Issuing" to 2026-07-01 07:26:55.429151612 +0000 UTC m=+410.471077237 I0701 07:26:55.429836 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" condition "Ready" to 2026-07-01 07:26:55.429827675 +0000 UTC m=+410.471753270 I0701 07:26:55.448607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:26:55.448707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:26:55.448730 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" condition "Issuing" to 2026-07-01 07:26:55.448724413 +0000 UTC m=+410.490650008 I0701 07:26:55.941841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7c8sc-wv2qp" condition "Approved" to 2026-07-01 07:26:55.941826109 +0000 UTC m=+410.983751694 I0701 07:26:55.966462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7c8sc-wv2qp" condition "Ready" to 2026-07-01 07:26:55.966452349 +0000 UTC m=+411.008377934 I0701 07:26:55.999143 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:26:55.999086134 +0000 UTC m=+411.041011729 I0701 07:26:56.025557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7c8sc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:10.903347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:27:10.903404 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-01 07:27:10.903379349 +0000 UTC m=+425.945304964 I0701 07:27:10.903650 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-01 07:27:10.903629034 +0000 UTC m=+425.945554659 I0701 07:27:10.918674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:10.918844 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-01 07:27:10.918822865 +0000 UTC m=+425.960748460 I0701 07:27:11.131871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:11.173718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c86vd" condition "Approved" to 2026-07-01 07:27:11.173694952 +0000 UTC m=+426.215620537 I0701 07:27:11.202864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c86vd" condition "Ready" to 2026-07-01 07:27:11.20285386 +0000 UTC m=+426.244779455 I0701 07:27:11.230324 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:27:11.230307515 +0000 UTC m=+426.272233140 I0701 07:27:11.247002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:11.247381 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:27:11.247374472 +0000 UTC m=+426.289300057 I0701 07:27:11.264099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:30:24.408358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:30:24.408418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-01 07:30:24.408411803 +0000 UTC m=+619.450337398 I0701 07:30:24.408645 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-01 07:30:24.408624336 +0000 UTC m=+619.450549961 I0701 07:30:24.425239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:30:24.425347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-01 07:30:24.425340002 +0000 UTC m=+619.467265587 I0701 07:30:24.584236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:30:24.613968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xj2j" condition "Approved" to 2026-07-01 07:30:24.613957632 +0000 UTC m=+619.655883227 I0701 07:30:24.633714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xj2j" condition "Ready" to 2026-07-01 07:30:24.633699819 +0000 UTC m=+619.675625424 I0701 07:30:24.660844 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:30:24.660831223 +0000 UTC m=+619.702756808 I0701 07:30:24.680433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:30:24.728828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:03.602634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:31:03.602695 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-01 07:31:03.602688543 +0000 UTC m=+658.644614138 I0701 07:31:03.602917 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-01 07:31:03.602895226 +0000 UTC m=+658.644820841 I0701 07:31:03.616145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:03.616205 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-01 07:31:03.616200032 +0000 UTC m=+658.658125627 I0701 07:31:03.860117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:03.889724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2cwc7" condition "Approved" to 2026-07-01 07:31:03.88971309 +0000 UTC m=+658.931638685 I0701 07:31:03.908871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2cwc7" condition "Ready" to 2026-07-01 07:31:03.908853574 +0000 UTC m=+658.950779179 I0701 07:31:03.933162 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:31:03.933147785 +0000 UTC m=+658.975073370 I0701 07:31:03.957255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:03.957552 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:31:03.957545568 +0000 UTC m=+658.999471153 I0701 07:31:03.962729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:03.981019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"