I0626 02:08:36.853757 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0626 02:08:36.854171 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0626 02:08:36.854403 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0626 02:08:36.859788 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0626 02:08:36.860322 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0626 02:08:36.860407 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0626 02:08:36.860511 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0626 02:08:36.862531 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0626 02:08:36.880235 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0626 02:08:36.885513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0626 02:08:36.891642 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0626 02:08:36.891725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0626 02:08:36.895082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0626 02:08:36.897494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0626 02:08:36.899659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0626 02:08:36.901740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0626 02:08:36.904006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0626 02:08:36.910175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0626 02:08:36.912679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0626 02:08:36.915215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0626 02:08:36.919483 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0626 02:08:36.919543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0626 02:08:36.923464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0626 02:08:36.926012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0626 02:08:36.929385 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0626 02:08:36.929422 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0626 02:08:36.929444 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0626 02:08:36.929466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0626 02:08:36.932137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0626 02:08:36.939019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0626 02:08:36.939102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0626 02:08:36.943329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0626 02:08:36.946117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0626 02:08:36.949265 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:36.949501 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:36.949629 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:36.951353 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:36.972721 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:36.987548 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:37.004577 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:37.019656 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:37.039580 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:37.046188 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 02:08:47.267620 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 02:08:47.267604988 +0000 UTC m=+10.450629821 I0626 02:08:48.052822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:08:48.052895 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 02:08:48.052884144 +0000 UTC m=+11.235908997 I0626 02:08:48.053672 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 02:08:48.053651082 +0000 UTC m=+11.236675925 I0626 02:08:48.068967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:08:48.069071 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 02:08:48.069059954 +0000 UTC m=+11.252084787 E0626 02:08:48.070836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 02:08:48.070957 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 02:08:48.070944001 +0000 UTC m=+11.253968834 E0626 02:08:48.071024 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 02:08:48.090234 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0626 02:08:48.090851 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 02:08:48.090921 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 02:08:48.090981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0626 02:08:48.092751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:08:48.113145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlr2f" condition "Approved" to 2026-06-26 02:08:48.113128873 +0000 UTC m=+11.296153706 I0626 02:08:48.128513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlr2f" condition "Ready" to 2026-06-26 02:08:48.128498893 +0000 UTC m=+11.311523726 I0626 02:08:48.153497 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:08:48.15348178 +0000 UTC m=+11.336506633 I0626 02:08:48.175113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:08:48.175538 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:08:48.175527695 +0000 UTC m=+11.358552528 I0626 02:08:48.187446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:08:48.187867 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:08:48.187853029 +0000 UTC m=+11.370877882 I0626 02:08:48.191704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:08:53.091023 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:08:53.091009365 +0000 UTC m=+16.274034198 I0626 02:09:18.606717 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 02:09:18.60668199 +0000 UTC m=+41.789706853 I0626 02:09:18.607746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:09:18.607793 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 02:09:18.607782041 +0000 UTC m=+41.790806914 I0626 02:09:18.621116 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 02:09:18.621094983 +0000 UTC m=+41.804119836 I0626 02:09:18.656121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:09:18.656412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 02:09:18.656186117 +0000 UTC m=+41.839210940 I0626 02:09:18.971632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:09:19.007917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m5lds" condition "Approved" to 2026-06-26 02:09:19.007896777 +0000 UTC m=+42.190921640 I0626 02:09:19.041648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m5lds" condition "Ready" to 2026-06-26 02:09:19.041634376 +0000 UTC m=+42.224659209 I0626 02:09:19.078288 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:09:19.078273058 +0000 UTC m=+42.261297891 I0626 02:09:19.105869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:09:19.162079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:13:32.250137 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready" to 2026-06-26 02:13:32.250126535 +0000 UTC m=+295.433151358 I0626 02:13:32.250176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:13:32.250249 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Issuing" to 2026-06-26 02:13:32.250239138 +0000 UTC m=+295.433263991 I0626 02:13:32.265925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:13:32.266028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:13:32.266054 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Issuing" to 2026-06-26 02:13:32.26604671 +0000 UTC m=+295.449071553 I0626 02:13:32.672525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-c7frw" condition "Approved" to 2026-06-26 02:13:32.672506479 +0000 UTC m=+295.855531342 I0626 02:13:32.700634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-c7frw" condition "Ready" to 2026-06-26 02:13:32.700625132 +0000 UTC m=+295.883649965 I0626 02:13:32.731298 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:13:32.731282317 +0000 UTC m=+295.914307180 I0626 02:13:32.744715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:13:32.745017 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:13:32.745011757 +0000 UTC m=+295.928036580 I0626 02:13:32.762411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:13:32.766682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:37.939652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:14:37.939694 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 02:14:37.939684764 +0000 UTC m=+361.122709607 I0626 02:14:37.941097 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 02:14:37.941077209 +0000 UTC m=+361.124102062 E0626 02:14:37.955535 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 02:14:37.955569 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 02:14:37.955561898 +0000 UTC m=+361.138586731 E0626 02:14:37.955606 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 02:14:37.959769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:37.959856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 02:14:37.959848735 +0000 UTC m=+361.142873568 E0626 02:14:37.966862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0626 02:14:37.967050 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 02:14:37.967144 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 02:14:37.967334 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0626 02:14:37.974877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:37.991763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v9lvb" condition "Approved" to 2026-06-26 02:14:37.991749235 +0000 UTC m=+361.174774068 I0626 02:14:38.004384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v9lvb" condition "Ready" to 2026-06-26 02:14:38.004374509 +0000 UTC m=+361.187399342 I0626 02:14:38.027555 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:14:38.027536114 +0000 UTC m=+361.210560977 I0626 02:14:38.043235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:38.043461 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:14:38.043455489 +0000 UTC m=+361.226480322 I0626 02:14:38.059728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:38.060196 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:14:38.060179985 +0000 UTC m=+361.243204848 I0626 02:14:38.062171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:14:42.967621 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:14:42.967606614 +0000 UTC m=+366.150631467 I0626 02:15:23.298006 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 02:15:23.297994911 +0000 UTC m=+406.481019744 I0626 02:15:23.298370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:23.298393 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 02:15:23.298389072 +0000 UTC m=+406.481413905 I0626 02:15:23.317172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:23.317200 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 02:15:23.317193116 +0000 UTC m=+406.500217939 I0626 02:15:23.317566 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 02:15:23.317547895 +0000 UTC m=+406.500572738 I0626 02:15:23.318615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:23.318633 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 02:15:23.318630344 +0000 UTC m=+406.501655167 I0626 02:15:23.318791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 02:15:23.318788298 +0000 UTC m=+406.501813121 I0626 02:15:23.335492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.335583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:23.335613 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 02:15:23.335605639 +0000 UTC m=+406.518630482 I0626 02:15:23.347288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.347347 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 02:15:23.347339023 +0000 UTC m=+406.530363846 I0626 02:15:23.357231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.357358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:23.357410 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 02:15:23.357403263 +0000 UTC m=+406.540428096 I0626 02:15:23.561220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.567326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crrm5" condition "Approved" to 2026-06-26 02:15:23.567317208 +0000 UTC m=+406.750342031 I0626 02:15:23.602124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crrm5" condition "Ready" to 2026-06-26 02:15:23.60211513 +0000 UTC m=+406.785139963 I0626 02:15:23.662469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.714973 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:23.714960564 +0000 UTC m=+406.897985387 I0626 02:15:23.758527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.834487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.930226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:23.940499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v4gqb" condition "Approved" to 2026-06-26 02:15:23.940488137 +0000 UTC m=+407.123512970 I0626 02:15:23.954621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v4gqb" condition "Ready" to 2026-06-26 02:15:23.954610766 +0000 UTC m=+407.137635609 I0626 02:15:23.966454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dd5lg" condition "Approved" to 2026-06-26 02:15:23.966444042 +0000 UTC m=+407.149468865 I0626 02:15:24.241703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dd5lg" condition "Ready" to 2026-06-26 02:15:24.241688507 +0000 UTC m=+407.424713370 I0626 02:15:24.484622 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:24.484604085 +0000 UTC m=+407.667628938 E0626 02:15:24.528942 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-czz59\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0626 02:15:24.781395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:24.880231 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-dd5lg" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-b2p42" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0626 02:15:25.189158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8kbj" condition "Approved" to 2026-06-26 02:15:25.189131145 +0000 UTC m=+408.372155978 I0626 02:15:25.592261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8kbj" condition "Ready" to 2026-06-26 02:15:25.592249456 +0000 UTC m=+408.775274279 I0626 02:15:25.633900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:25.834578 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:25.834567746 +0000 UTC m=+409.017592569 I0626 02:15:25.932493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:25.933090 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:25.933079273 +0000 UTC m=+409.116104126 I0626 02:15:26.130814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:35.268463 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" condition "Ready" to 2026-06-26 02:15:35.268428767 +0000 UTC m=+418.451453620 I0626 02:15:35.268813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:35.268914 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" condition "Issuing" to 2026-06-26 02:15:35.26889978 +0000 UTC m=+418.451924633 I0626 02:15:35.284964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tccwv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:35.285297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:35.285428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" condition "Issuing" to 2026-06-26 02:15:35.285341787 +0000 UTC m=+418.468366630 I0626 02:15:35.520748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tccwv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:35.528538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tccwv-hvvvh" condition "Approved" to 2026-06-26 02:15:35.528522815 +0000 UTC m=+418.711547658 I0626 02:15:35.544711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tccwv-hvvvh" condition "Ready" to 2026-06-26 02:15:35.544698144 +0000 UTC m=+418.727722977 I0626 02:15:35.581214 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:35.581201828 +0000 UTC m=+418.764226641 I0626 02:15:35.602687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tccwv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tccwv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:47.853861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:15:47.853908 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 02:15:47.85389821 +0000 UTC m=+431.036923063 I0626 02:15:47.854180 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 02:15:47.854164439 +0000 UTC m=+431.037189262 I0626 02:15:47.868196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:47.868333 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 02:15:47.868318279 +0000 UTC m=+431.051343112 I0626 02:15:47.972834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:48.006324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c6fq5" condition "Approved" to 2026-06-26 02:15:48.006307496 +0000 UTC m=+431.189332329 I0626 02:15:48.025370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c6fq5" condition "Ready" to 2026-06-26 02:15:48.025358652 +0000 UTC m=+431.208383465 I0626 02:15:48.051503 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:48.051484413 +0000 UTC m=+431.234509276 I0626 02:15:48.069115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:48.069982 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:15:48.069958554 +0000 UTC m=+431.252983377 I0626 02:15:48.080438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:15:48.091243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:18:59.977462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:18:59.977519 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 02:18:59.977513155 +0000 UTC m=+623.160537988 I0626 02:18:59.977631 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 02:18:59.977613048 +0000 UTC m=+623.160637911 I0626 02:18:59.998349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:18:59.998418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 02:18:59.998410283 +0000 UTC m=+623.181435106 I0626 02:19:00.338415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:00.416293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dwb8k" condition "Approved" to 2026-06-26 02:19:00.416282217 +0000 UTC m=+623.599307040 I0626 02:19:00.474243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dwb8k" condition "Ready" to 2026-06-26 02:19:00.474231258 +0000 UTC m=+623.657256091 I0626 02:19:00.500466 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:19:00.5004525 +0000 UTC m=+623.683477313 I0626 02:19:00.529181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:00.575107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:39.271760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 02:19:39.271839 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 02:19:39.271829074 +0000 UTC m=+662.454853937 I0626 02:19:39.271873 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 02:19:39.271862425 +0000 UTC m=+662.454887248 I0626 02:19:39.292745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:39.293447 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 02:19:39.293437518 +0000 UTC m=+662.476462351 I0626 02:19:39.498666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:39.531029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lj4lm" condition "Approved" to 2026-06-26 02:19:39.531017233 +0000 UTC m=+662.714042066 I0626 02:19:39.553434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lj4lm" condition "Ready" to 2026-06-26 02:19:39.553422813 +0000 UTC m=+662.736447646 I0626 02:19:39.582619 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 02:19:39.582607172 +0000 UTC m=+662.765632005 I0626 02:19:39.602189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 02:19:39.650599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"