I0428 06:50:23.487372 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 06:50:23.487630 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 06:50:23.487799 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 06:50:23.496539 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 06:50:23.497622 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 06:50:23.497680 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 06:50:23.497758 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 06:50:23.500852 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 06:50:23.514984 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 06:50:23.515185 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 06:50:23.518944 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 06:50:23.521392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 06:50:23.526847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 06:50:23.532471 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 06:50:23.532544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 06:50:23.537758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 06:50:23.543894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 06:50:23.543944 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 06:50:23.544052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 06:50:23.547583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 06:50:23.550719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 06:50:23.553395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 06:50:23.555359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 06:50:23.561674 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 06:50:23.561698 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 06:50:23.564579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 06:50:23.567171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 06:50:23.569698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 06:50:23.572959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 06:50:23.574766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 06:50:23.576731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 06:50:23.578436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 06:50:23.578918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 06:50:23.580713 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.582976 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.582961 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.604720 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.619305 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.669855 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.681177 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.688665 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.706940 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:23.722334 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:50:37.539521 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 06:50:37.539506907 +0000 UTC m=+14.082026245 I0428 06:50:38.367159 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:50:38.367138449 +0000 UTC m=+14.909657827 I0428 06:50:38.367199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:50:38.367496 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:50:38.367440497 +0000 UTC m=+14.909959875 I0428 06:50:38.387649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:50:38.387714 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:50:38.387705748 +0000 UTC m=+14.930225076 E0428 06:50:38.387858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:50:38.387970 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 06:50:38.387963884 +0000 UTC m=+14.930483222 E0428 06:50:38.388000 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:50:38.410977 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 06:50:38.411238 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:50:38.411307 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:50:38.411382 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 06:50:38.413667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:50:38.413953 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:50:38.413941657 +0000 UTC m=+14.956460995 I0428 06:50:38.414339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:50:38.424581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5m929" condition "Approved" to 2026-04-28 06:50:38.424561209 +0000 UTC m=+14.967080577 I0428 06:50:38.430672 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:50:38.43065597 +0000 UTC m=+14.973175308 I0428 06:50:38.438742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5m929" condition "Ready" to 2026-04-28 06:50:38.4387078 +0000 UTC m=+14.981227138 I0428 06:50:38.439379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:50:38.462889 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:50:38.462872197 +0000 UTC m=+15.005391535 I0428 06:50:38.480674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:50:43.412288 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:50:43.412273471 +0000 UTC m=+19.954792829 I0428 06:51:09.789411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:51:09.789489 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:51:09.789482062 +0000 UTC m=+46.332001400 I0428 06:51:09.790278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:51:09.790273417 +0000 UTC m=+46.332792755 I0428 06:51:09.826798 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 06:51:09.826781626 +0000 UTC m=+46.369300964 I0428 06:51:09.888880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:51:09.889142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:51:09.889268 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:51:09.889257602 +0000 UTC m=+46.431776960 I0428 06:51:10.019996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tsjw7" condition "Approved" to 2026-04-28 06:51:10.019977423 +0000 UTC m=+46.562496771 I0428 06:51:10.061137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tsjw7" condition "Ready" to 2026-04-28 06:51:10.061119866 +0000 UTC m=+46.603639224 I0428 06:51:10.099413 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:51:10.099393293 +0000 UTC m=+46.641912631 I0428 06:51:10.123102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:51:10.123456 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:51:10.123449151 +0000 UTC m=+46.665968489 I0428 06:51:10.152277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:56:48.424807 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-04-28 06:56:48.424782743 +0000 UTC m=+384.967302091 I0428 06:56:48.425112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:56:48.425170 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Issuing" to 2026-04-28 06:56:48.425156341 +0000 UTC m=+384.967675709 I0428 06:56:48.451375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:56:48.451460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-04-28 06:56:48.451449139 +0000 UTC m=+384.993968507 I0428 06:56:48.574347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:56:48.608864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-sqmf2" condition "Approved" to 2026-04-28 06:56:48.608849664 +0000 UTC m=+385.151369012 I0428 06:56:48.638980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-sqmf2" condition "Ready" to 2026-04-28 06:56:48.63896647 +0000 UTC m=+385.181485808 I0428 06:56:48.667874 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:56:48.667863607 +0000 UTC m=+385.210382945 I0428 06:56:48.694213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:56:48.694530 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:56:48.694523703 +0000 UTC m=+385.237043041 I0428 06:56:48.715354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:57:57.029695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:57:57.029740 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:57:57.029730274 +0000 UTC m=+453.572249642 I0428 06:57:57.030067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:57:57.03004982 +0000 UTC m=+453.572569168 E0428 06:57:57.045968 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:57:57.046009 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 06:57:57.04599968 +0000 UTC m=+453.588519038 E0428 06:57:57.046063 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:57:57.050275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:57:57.050367 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:57:57.050359544 +0000 UTC m=+453.592878892 E0428 06:57:57.085002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 06:57:57.085103 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:57:57.085125 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:57:57.085272 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 06:57:57.089925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:57:57.112327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4qj7d" condition "Approved" to 2026-04-28 06:57:57.112301413 +0000 UTC m=+453.654820761 I0428 06:57:57.136642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4qj7d" condition "Ready" to 2026-04-28 06:57:57.136630904 +0000 UTC m=+453.679150252 I0428 06:57:57.210353 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:57:57.210337841 +0000 UTC m=+453.752857199 I0428 06:57:57.235360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:57:57.235959 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:57:57.235950488 +0000 UTC m=+453.778469836 I0428 06:57:57.264217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:57:57.264615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:02.085969 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:02.085954818 +0000 UTC m=+458.628474196 I0428 06:58:48.419721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:58:48.429219 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:58:48.429203255 +0000 UTC m=+504.971722593 I0428 06:58:48.420722 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:58:48.420710085 +0000 UTC m=+504.963229433 I0428 06:58:48.420815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:58:48.429891 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:58:48.429886507 +0000 UTC m=+504.972405845 I0428 06:58:48.420860 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:58:48.420856148 +0000 UTC m=+504.963375496 I0428 06:58:48.436325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:58:48.436383 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:58:48.436375141 +0000 UTC m=+504.978894469 I0428 06:58:48.436435 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:58:48.436420052 +0000 UTC m=+504.978939400 I0428 06:58:48.483860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.483946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:58:48.483973 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:58:48.483967071 +0000 UTC m=+505.026486409 I0428 06:58:48.487557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.487614 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:58:48.487608115 +0000 UTC m=+505.030127453 I0428 06:58:48.491604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.491665 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:58:48.491659217 +0000 UTC m=+505.034178555 I0428 06:58:48.770994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.783591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8fdzv" condition "Approved" to 2026-04-28 06:58:48.783576 +0000 UTC m=+505.326095338 I0428 06:58:48.814974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8fdzv" condition "Ready" to 2026-04-28 06:58:48.814960754 +0000 UTC m=+505.357480092 I0428 06:58:48.841872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.882189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.893065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-46hft" condition "Approved" to 2026-04-28 06:58:48.892046875 +0000 UTC m=+505.434566243 I0428 06:58:48.906551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:58:48.907007 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:58:48.906985498 +0000 UTC m=+505.449504876 I0428 06:58:48.926351 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:48.926337971 +0000 UTC m=+505.468857309 I0428 06:58:48.927784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-46hft" condition "Ready" to 2026-04-28 06:58:48.927772856 +0000 UTC m=+505.470292194 I0428 06:58:48.963404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.964357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:48.964678 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:48.964670097 +0000 UTC m=+505.507189435 I0428 06:58:48.970776 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:48.970761074 +0000 UTC m=+505.513280442 I0428 06:58:49.090610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:49.091142 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:49.091130726 +0000 UTC m=+505.633650104 I0428 06:58:49.200546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qx6jb" condition "Approved" to 2026-04-28 06:58:49.200524335 +0000 UTC m=+505.743043713 I0428 06:58:49.778674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qx6jb" condition "Ready" to 2026-04-28 06:58:49.778655834 +0000 UTC m=+506.321175182 I0428 06:58:49.949476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:49.993888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:50.246011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ppcxs" condition "Approved" to 2026-04-28 06:58:50.245994775 +0000 UTC m=+506.788514123 I0428 06:58:50.507144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ppcxs" condition "Ready" to 2026-04-28 06:58:50.50713481 +0000 UTC m=+507.049654138 I0428 06:58:50.851894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:51.045233 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-ppcxs" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-f2l5k" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0428 06:58:51.770550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:51.885471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-br54m" condition "Approved" to 2026-04-28 06:58:51.885441452 +0000 UTC m=+508.427960830 I0428 06:58:51.913711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-br54m" condition "Ready" to 2026-04-28 06:58:51.913694688 +0000 UTC m=+508.456214036 I0428 06:58:52.011598 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:52.011586398 +0000 UTC m=+508.554105736 I0428 06:58:52.253413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:52.253872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:52.253859929 +0000 UTC m=+508.796379277 I0428 06:58:52.342047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:58:52.393430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:10.682238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:59:10.682340 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" condition "Ready" to 2026-04-28 06:59:10.6823063 +0000 UTC m=+527.224825648 I0428 06:59:10.683519 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" condition "Issuing" to 2026-04-28 06:59:10.68350388 +0000 UTC m=+527.226023308 I0428 06:59:11.034964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:11.035096 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" condition "Ready" to 2026-04-28 06:59:11.035085982 +0000 UTC m=+527.577605330 I0428 06:59:11.433053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:11.486043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zd2d5-dwt8c" condition "Approved" to 2026-04-28 06:59:11.486029172 +0000 UTC m=+528.028548520 I0428 06:59:11.510583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zd2d5-dwt8c" condition "Ready" to 2026-04-28 06:59:11.510572901 +0000 UTC m=+528.053092239 I0428 06:59:11.603868 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:59:11.603847254 +0000 UTC m=+528.146366592 I0428 06:59:11.630700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zd2d5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:16.755270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:59:16.755328 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:59:16.755315167 +0000 UTC m=+533.297834525 I0428 06:59:16.755910 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:59:16.755887716 +0000 UTC m=+533.298407084 I0428 06:59:16.774695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:16.774853 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:59:16.774838808 +0000 UTC m=+533.317358146 I0428 06:59:16.975403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:17.012246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h9lhm" condition "Approved" to 2026-04-28 06:59:17.012222314 +0000 UTC m=+533.554741662 I0428 06:59:17.034860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h9lhm" condition "Ready" to 2026-04-28 06:59:17.034839298 +0000 UTC m=+533.577358656 I0428 06:59:17.080113 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:59:17.080097455 +0000 UTC m=+533.622616803 I0428 06:59:17.109608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:17.110036 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:59:17.110028672 +0000 UTC m=+533.652548000 I0428 06:59:17.131060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:59:17.131782 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:59:17.13176688 +0000 UTC m=+533.674286208 I0428 06:59:17.133620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:02:44.570142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 07:02:44.570126306 +0000 UTC m=+741.112645684 I0428 07:02:44.570125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:02:44.570234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 07:02:44.57022429 +0000 UTC m=+741.112743678 I0428 07:02:44.590472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:02:44.590558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:02:44.590577 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 07:02:44.590570784 +0000 UTC m=+741.133090132 I0428 07:02:44.789995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:02:44.806727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fs6sj" condition "Approved" to 2026-04-28 07:02:44.806712556 +0000 UTC m=+741.349231894 I0428 07:02:44.830177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fs6sj" condition "Ready" to 2026-04-28 07:02:44.830167718 +0000 UTC m=+741.372687046 I0428 07:02:44.859645 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:02:44.85962954 +0000 UTC m=+741.402148888 I0428 07:02:44.880333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:02:44.880827 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:02:44.88081939 +0000 UTC m=+741.423338748 I0428 07:02:44.903194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:03:30.299611 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 07:03:30.299586538 +0000 UTC m=+786.842105916 I0428 07:03:30.299994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:03:30.301850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 07:03:30.301699177 +0000 UTC m=+786.844218555 I0428 07:03:30.319174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:03:30.319314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:03:30.319344 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 07:03:30.319336428 +0000 UTC m=+786.861855766 I0428 07:03:30.875356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rvw2d" condition "Approved" to 2026-04-28 07:03:30.875337383 +0000 UTC m=+787.417856731 I0428 07:03:30.896271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rvw2d" condition "Ready" to 2026-04-28 07:03:30.896260187 +0000 UTC m=+787.438779525 I0428 07:03:30.940610 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:03:30.940596858 +0000 UTC m=+787.483116196 I0428 07:03:30.959022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:03:30.959470 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:03:30.959463135 +0000 UTC m=+787.501982473 I0428 07:03:30.994168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"