I0626 10:16:18.446998 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0626 10:16:18.447092 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0626 10:16:18.447169 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0626 10:16:18.450335 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0626 10:16:18.450703 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0626 10:16:18.450792 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0626 10:16:18.450964 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0626 10:16:18.453323 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0626 10:16:18.469195 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0626 10:16:18.475200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0626 10:16:18.476773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0626 10:16:18.479738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0626 10:16:18.482438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0626 10:16:18.485020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0626 10:16:18.487045 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0626 10:16:18.487064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0626 10:16:18.487176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0626 10:16:18.488937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0626 10:16:18.490660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0626 10:16:18.492955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0626 10:16:18.497060 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0626 10:16:18.497101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0626 10:16:18.499788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0626 10:16:18.502233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0626 10:16:18.504555 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0626 10:16:18.504630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0626 10:16:18.506596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0626 10:16:18.508375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0626 10:16:18.510255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0626 10:16:18.511813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0626 10:16:18.513488 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0626 10:16:18.513889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0626 10:16:18.518138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0626 10:16:18.520972 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.522175 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.522514 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.534498 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.553657 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.568047 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.578034 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.596140 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.609669 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:18.617262 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:31.092204 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 10:16:31.092180156 +0000 UTC m=+12.677775346 I0626 10:16:31.755822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:16:31.755855 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:16:31.755848378 +0000 UTC m=+13.341443548 I0626 10:16:31.756545 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:16:31.756539842 +0000 UTC m=+13.342135012 E0626 10:16:31.769468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:16:31.769535 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 10:16:31.769527585 +0000 UTC m=+13.355122755 E0626 10:16:31.769558 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:16:31.772352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:31.772455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:16:31.772487 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:16:31.772476977 +0000 UTC m=+13.358072167 E0626 10:16:31.782948 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0626 10:16:31.783171 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:16:31.784701 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:16:31.785402 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0626 10:16:31.812859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:31.813076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-57cks" condition "Approved" to 2026-06-26 10:16:31.813066465 +0000 UTC m=+13.398661645 I0626 10:16:31.824951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-57cks" condition "Ready" to 2026-06-26 10:16:31.824940936 +0000 UTC m=+13.410536106 I0626 10:16:31.847829 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:31.847820058 +0000 UTC m=+13.433415228 I0626 10:16:31.867358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:36.783595 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:36.783570797 +0000 UTC m=+18.369165957 I0626 10:16:59.173210 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:16:59.173185677 +0000 UTC m=+40.758780847 I0626 10:16:59.173861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:16:59.173885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:16:59.173880973 +0000 UTC m=+40.759476143 I0626 10:16:59.190524 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 10:16:59.190513597 +0000 UTC m=+40.776108757 I0626 10:16:59.212001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:59.212076 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:16:59.212070168 +0000 UTC m=+40.797665328 I0626 10:16:59.299104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:59.442629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqxfn" condition "Approved" to 2026-06-26 10:16:59.442619157 +0000 UTC m=+41.028214327 I0626 10:16:59.467069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqxfn" condition "Ready" to 2026-06-26 10:16:59.467056257 +0000 UTC m=+41.052651437 E0626 10:16:59.467142 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-x86x9 not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-x86x9\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-bqxfn" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0626 10:16:59.487925 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-x86x9 not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-x86x9\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-bqxfn" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0626 10:16:59.684559 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" resource_name="rabbitmq-messaging-topology-operator-webhook" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-bqxfn" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-x86x9" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0626 10:16:59.712705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fx2wb" condition "Approved" to 2026-06-26 10:16:59.712694333 +0000 UTC m=+41.298289503 I0626 10:16:59.731759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fx2wb" condition "Ready" to 2026-06-26 10:16:59.731748285 +0000 UTC m=+41.317343445 I0626 10:16:59.755408 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:59.755393876 +0000 UTC m=+41.340989036 I0626 10:16:59.788424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:21:01.416151 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready" to 2026-06-26 10:21:01.416100674 +0000 UTC m=+283.001695834 I0626 10:21:01.416650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:21:01.416696 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-06-26 10:21:01.416691723 +0000 UTC m=+283.002286883 I0626 10:21:01.435609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:21:01.435714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:21:01.435748 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-06-26 10:21:01.43573849 +0000 UTC m=+283.021333690 I0626 10:21:01.647055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:21:01.659119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-pbgvv" condition "Approved" to 2026-06-26 10:21:01.659109246 +0000 UTC m=+283.244704416 I0626 10:21:01.680112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-pbgvv" condition "Ready" to 2026-06-26 10:21:01.680100534 +0000 UTC m=+283.265695724 I0626 10:21:01.700867 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:21:01.700852135 +0000 UTC m=+283.286447325 I0626 10:21:01.724289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:21:01.724589 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:21:01.724584249 +0000 UTC m=+283.310179419 I0626 10:21:01.744867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:21:01.745923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:05.960274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:05.960316 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:22:05.960275521 +0000 UTC m=+347.545870681 I0626 10:22:05.960328 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 10:22:05.960302272 +0000 UTC m=+347.545897432 E0626 10:22:05.971029 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:22:05.971080 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 10:22:05.971071779 +0000 UTC m=+347.556666979 E0626 10:22:05.971145 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:22:05.973954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:05.974141 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:22:05.974012199 +0000 UTC m=+347.559607379 E0626 10:22:05.985884 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0626 10:22:05.985947 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:22:05.985972 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:22:05.986006 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0626 10:22:05.993384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:06.016177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k7xtv" condition "Approved" to 2026-06-26 10:22:06.016156879 +0000 UTC m=+347.601752069 I0626 10:22:06.029977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k7xtv" condition "Ready" to 2026-06-26 10:22:06.029966129 +0000 UTC m=+347.615561299 I0626 10:22:06.053507 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:06.053487433 +0000 UTC m=+347.639082603 I0626 10:22:06.068668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:06.068924 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:06.068916693 +0000 UTC m=+347.654511863 I0626 10:22:06.078127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:06.088132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:10.987213 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:10.987198701 +0000 UTC m=+352.572793901 I0626 10:22:52.887613 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:22:52.887583762 +0000 UTC m=+394.473178922 I0626 10:22:52.887978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.888008 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:22:52.888002316 +0000 UTC m=+394.473597476 I0626 10:22:52.905070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.905102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:22:52.905095427 +0000 UTC m=+394.490690587 I0626 10:22:52.905388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 10:22:52.905378416 +0000 UTC m=+394.490973586 I0626 10:22:52.905694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.905713 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:22:52.905710186 +0000 UTC m=+394.491305346 I0626 10:22:52.905715 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:22:52.905702215 +0000 UTC m=+394.491297375 I0626 10:22:52.945745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:52.945846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.945869 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:22:52.945863938 +0000 UTC m=+394.531459098 I0626 10:22:52.946350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:52.946414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.946434 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:22:52.946429024 +0000 UTC m=+394.532024184 I0626 10:22:52.950480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:52.950664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:52.951667 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:22:52.95164196 +0000 UTC m=+394.537237150 I0626 10:22:53.176035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.181922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bv22j" condition "Approved" to 2026-06-26 10:22:53.181911666 +0000 UTC m=+394.767506836 I0626 10:22:53.191648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.206433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zrrgf" condition "Approved" to 2026-06-26 10:22:53.206422969 +0000 UTC m=+394.792018149 I0626 10:22:53.208763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bv22j" condition "Ready" to 2026-06-26 10:22:53.208753729 +0000 UTC m=+394.794348889 I0626 10:22:53.244120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zrrgf" condition "Ready" to 2026-06-26 10:22:53.244111657 +0000 UTC m=+394.829706817 I0626 10:22:53.335414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:53.335440 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:22:53.335434451 +0000 UTC m=+394.921029611 I0626 10:22:53.352188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:22:53.352225 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:22:53.352218773 +0000 UTC m=+394.937813933 I0626 10:22:53.353018 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:53.353014738 +0000 UTC m=+394.938609898 I0626 10:22:53.353483 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:53.353473761 +0000 UTC m=+394.939068931 I0626 10:22:53.367192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.375000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.375296 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:53.375287555 +0000 UTC m=+394.960882725 I0626 10:22:53.434847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.435112 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:53.435096405 +0000 UTC m=+395.020691565 I0626 10:22:53.523199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:53.942226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cj6x9" condition "Approved" to 2026-06-26 10:22:53.942216647 +0000 UTC m=+395.527811807 I0626 10:22:54.029244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jchdj" condition "Approved" to 2026-06-26 10:22:54.029230781 +0000 UTC m=+395.614825941 I0626 10:22:54.321419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cj6x9" condition "Ready" to 2026-06-26 10:22:54.321404626 +0000 UTC m=+395.906999806 I0626 10:22:54.484022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kc6fm" condition "Approved" to 2026-06-26 10:22:54.483998802 +0000 UTC m=+396.069593972 I0626 10:22:54.536145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jchdj" condition "Ready" to 2026-06-26 10:22:54.536133533 +0000 UTC m=+396.121728703 I0626 10:22:55.035972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kc6fm" condition "Ready" to 2026-06-26 10:22:55.035959742 +0000 UTC m=+396.621554912 I0626 10:22:55.723727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:55.828257 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:55.828243929 +0000 UTC m=+397.413839099 I0626 10:22:55.923284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:56.223254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:56.223706 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:56.223696289 +0000 UTC m=+397.809291489 I0626 10:22:56.327188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:56.701833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:22:56.929250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:01.207314 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Ready" to 2026-06-26 10:23:01.207299584 +0000 UTC m=+402.792894754 I0626 10:23:01.207730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:01.207762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Issuing" to 2026-06-26 10:23:01.207755128 +0000 UTC m=+402.793350298 I0626 10:23:01.222147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:01.222197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:01.222297 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Issuing" to 2026-06-26 10:23:01.22220498 +0000 UTC m=+402.807800140 I0626 10:23:01.368317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dsbgj-pb2zr" condition "Approved" to 2026-06-26 10:23:01.368304315 +0000 UTC m=+402.953899485 I0626 10:23:01.387224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dsbgj-pb2zr" condition "Ready" to 2026-06-26 10:23:01.38721434 +0000 UTC m=+402.972809500 I0626 10:23:01.423293 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:01.423279777 +0000 UTC m=+403.008874947 I0626 10:23:01.443478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:01.444446 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:01.444428979 +0000 UTC m=+403.030024139 I0626 10:23:01.469048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:01.469509 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsbgj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:01.469502298 +0000 UTC m=+403.055097468 I0626 10:23:14.494228 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:23:14.494208025 +0000 UTC m=+416.079803175 I0626 10:23:14.494521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:14.494536 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:23:14.494532955 +0000 UTC m=+416.080128115 I0626 10:23:14.513258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:14.513304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:14.513316 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:23:14.513311774 +0000 UTC m=+416.098906944 I0626 10:23:14.914786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lbjlh" condition "Approved" to 2026-06-26 10:23:14.91474943 +0000 UTC m=+416.500344600 I0626 10:23:14.930386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lbjlh" condition "Ready" to 2026-06-26 10:23:14.930377856 +0000 UTC m=+416.515973026 I0626 10:23:14.961240 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:14.961225665 +0000 UTC m=+416.546820825 I0626 10:23:14.985008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:14.985307 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:14.985298612 +0000 UTC m=+416.570893782 I0626 10:23:14.989449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:15.000892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:15.001171 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:15.001165044 +0000 UTC m=+416.586760214 I0626 10:26:23.619670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:26:23.619713 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:26:23.619694521 +0000 UTC m=+605.205289681 I0626 10:26:23.619770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:26:23.619753283 +0000 UTC m=+605.205348453 I0626 10:26:23.637602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:26:23.637658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:26:23.637700 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:26:23.637692615 +0000 UTC m=+605.223287785 I0626 10:26:23.883899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4vrws" condition "Approved" to 2026-06-26 10:26:23.883887174 +0000 UTC m=+605.469482354 I0626 10:26:23.908367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4vrws" condition "Ready" to 2026-06-26 10:26:23.908351777 +0000 UTC m=+605.493946937 I0626 10:26:23.941379 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:26:23.941365568 +0000 UTC m=+605.526960738 I0626 10:26:23.972629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:26:23.972920 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:26:23.972915397 +0000 UTC m=+605.558510557 I0626 10:26:23.978382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:26:23.992820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:26:23.993087 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:26:23.993080324 +0000 UTC m=+605.578675484 I0626 10:27:02.750590 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 10:27:02.75058008 +0000 UTC m=+644.336175240 I0626 10:27:02.750901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:27:02.750960 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 10:27:02.750954731 +0000 UTC m=+644.336549891 I0626 10:27:02.766797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:27:02.766873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:27:02.766897 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 10:27:02.766889024 +0000 UTC m=+644.352484184 I0626 10:27:03.209932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:27:03.222779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-45cws" condition "Approved" to 2026-06-26 10:27:03.222767895 +0000 UTC m=+644.808363065 I0626 10:27:03.244496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-45cws" condition "Ready" to 2026-06-26 10:27:03.244481727 +0000 UTC m=+644.830076917 I0626 10:27:03.269568 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:27:03.269555476 +0000 UTC m=+644.855150646 I0626 10:27:03.297434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:27:03.339499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"