I0709 13:10:39.141658 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0709 13:10:39.141851 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0709 13:10:39.142194 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0709 13:10:39.148055 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0709 13:10:39.148441 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0709 13:10:39.148509 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0709 13:10:39.148549 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0709 13:10:39.151538 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0709 13:10:39.171040 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0709 13:10:39.180151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0709 13:10:39.186047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0709 13:10:39.187766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0709 13:10:39.189371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0709 13:10:39.191753 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0709 13:10:39.191782 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0709 13:10:39.191971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0709 13:10:39.195067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0709 13:10:39.197456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0709 13:10:39.205563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0709 13:10:39.208470 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0709 13:10:39.208638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0709 13:10:39.211357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0709 13:10:39.212899 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0709 13:10:39.213112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0709 13:10:39.214865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0709 13:10:39.216539 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0709 13:10:39.216696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0709 13:10:39.218378 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0709 13:10:39.218535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0709 13:10:39.220423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0709 13:10:39.224178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0709 13:10:39.227567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0709 13:10:39.229967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0709 13:10:39.232250 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.232659 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.233171 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.234212 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.250032 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.288388 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.288792 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.304267 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.322558 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:39.359508 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 13:10:51.156867 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-09 13:10:51.156843578 +0000 UTC m=+12.048465021 I0709 13:10:51.867535 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 13:10:51.867521832 +0000 UTC m=+12.759143295 I0709 13:10:51.867589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:10:51.867652 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 13:10:51.867606314 +0000 UTC m=+12.759227757 E0709 13:10:51.882576 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 13:10:51.882643 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-09 13:10:51.882637221 +0000 UTC m=+12.774258664 E0709 13:10:51.882667 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 13:10:51.885316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:10:51.885486 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 13:10:51.885472662 +0000 UTC m=+12.777094135 E0709 13:10:51.892901 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0709 13:10:51.893021 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 13:10:51.893048 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 13:10:51.893085 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0709 13:10:51.905569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:10:51.928860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kvtwg" condition "Approved" to 2026-07-09 13:10:51.928846701 +0000 UTC m=+12.820468164 I0709 13:10:51.941677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kvtwg" condition "Ready" to 2026-07-09 13:10:51.941665286 +0000 UTC m=+12.833286729 I0709 13:10:51.966217 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:10:51.966205572 +0000 UTC m=+12.857827005 I0709 13:10:51.985807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:10:51.986255 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:10:51.986233601 +0000 UTC m=+12.877855044 I0709 13:10:52.002792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:10:52.003499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:10:52.003956 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:10:52.003948469 +0000 UTC m=+12.895569912 I0709 13:10:56.893342 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:10:56.89332773 +0000 UTC m=+17.784949173 I0709 13:11:20.884671 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 13:11:20.884629173 +0000 UTC m=+41.776250616 I0709 13:11:20.885904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:11:20.886038 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 13:11:20.886028084 +0000 UTC m=+41.777649547 I0709 13:11:20.902230 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-09 13:11:20.902219284 +0000 UTC m=+41.793840727 I0709 13:11:20.913397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:11:20.913459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:11:20.914234 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 13:11:20.914223544 +0000 UTC m=+41.805845017 I0709 13:11:21.087594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r55xd" condition "Approved" to 2026-07-09 13:11:21.087584163 +0000 UTC m=+41.979205606 I0709 13:11:21.123442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r55xd" condition "Ready" to 2026-07-09 13:11:21.12343041 +0000 UTC m=+42.015051853 I0709 13:11:21.154936 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:11:21.154923418 +0000 UTC m=+42.046544861 I0709 13:11:21.184621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:11:21.185075 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:11:21.185068155 +0000 UTC m=+42.076689598 I0709 13:11:21.210291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:11:21.211038 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:11:21.211029584 +0000 UTC m=+42.102651027 I0709 13:11:21.212310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:16:01.372621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:16:01.372702 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Issuing" to 2026-07-09 13:16:01.372660544 +0000 UTC m=+322.264282017 I0709 13:16:01.372732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Ready" to 2026-07-09 13:16:01.372715396 +0000 UTC m=+322.264336859 I0709 13:16:01.390097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:16:01.390206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:16:01.390221 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Issuing" to 2026-07-09 13:16:01.390215092 +0000 UTC m=+322.281836535 I0709 13:16:01.907744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-196.nip.io-tls-ll6fb" condition "Approved" to 2026-07-09 13:16:01.907735105 +0000 UTC m=+322.799356538 I0709 13:16:01.936146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-196.nip.io-tls-ll6fb" condition "Ready" to 2026-07-09 13:16:01.936129553 +0000 UTC m=+322.827751026 I0709 13:16:01.973750 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:16:01.973738677 +0000 UTC m=+322.865360120 I0709 13:16:01.994066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:16:01.994441 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:16:01.994434679 +0000 UTC m=+322.886056122 I0709 13:16:02.003611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:16:02.019289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:07.180342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:07.180476 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 13:17:07.180431513 +0000 UTC m=+388.072052996 I0709 13:17:07.180644 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-09 13:17:07.180625747 +0000 UTC m=+388.072247190 E0709 13:17:07.194495 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 13:17:07.194600 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-09 13:17:07.194560445 +0000 UTC m=+388.086181878 E0709 13:17:07.194631 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 13:17:07.196676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:07.196759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:07.196779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 13:17:07.196771959 +0000 UTC m=+388.088393402 E0709 13:17:07.209184 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0709 13:17:07.211959 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 13:17:07.211996 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 13:17:07.212045 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0709 13:17:07.238329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gbg72" condition "Approved" to 2026-07-09 13:17:07.238314256 +0000 UTC m=+388.129935699 I0709 13:17:07.252521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gbg72" condition "Ready" to 2026-07-09 13:17:07.252510169 +0000 UTC m=+388.144131602 I0709 13:17:07.277145 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:07.277123156 +0000 UTC m=+388.168744649 I0709 13:17:07.293430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:07.293804 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:07.29379437 +0000 UTC m=+388.185415843 I0709 13:17:07.318735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:07.321872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:12.209871 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:12.209853566 +0000 UTC m=+393.101475029 I0709 13:17:54.325114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:54.326346 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 13:17:54.326339566 +0000 UTC m=+435.217960999 I0709 13:17:54.335280 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 13:17:54.335268489 +0000 UTC m=+435.226889912 I0709 13:17:54.337336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:54.337366 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-09 13:17:54.337361298 +0000 UTC m=+435.228982731 I0709 13:17:54.349081 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 13:17:54.325167188 +0000 UTC m=+435.216788621 I0709 13:17:54.378714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.378782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:54.379344 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 13:17:54.379338496 +0000 UTC m=+435.270959929 I0709 13:17:54.386039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:54.386065 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-09 13:17:54.386059529 +0000 UTC m=+435.277680962 I0709 13:17:54.387181 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 13:17:54.387176835 +0000 UTC m=+435.278798268 I0709 13:17:54.387384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.387423 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 13:17:54.387419981 +0000 UTC m=+435.279041414 I0709 13:17:54.406284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.406338 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 13:17:54.406331942 +0000 UTC m=+435.297953365 I0709 13:17:54.598198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.603070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8dp55" condition "Approved" to 2026-07-09 13:17:54.603059174 +0000 UTC m=+435.494680617 I0709 13:17:54.626941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8dp55" condition "Ready" to 2026-07-09 13:17:54.626931178 +0000 UTC m=+435.518552611 I0709 13:17:54.675840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.689979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:17:54.690014 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 13:17:54.690008229 +0000 UTC m=+435.581629662 I0709 13:17:54.701319 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:54.701311287 +0000 UTC m=+435.592932720 I0709 13:17:54.739116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.743342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:54.743664 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:54.743656923 +0000 UTC m=+435.635278356 I0709 13:17:54.768699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fqbsk" condition "Approved" to 2026-07-09 13:17:54.768688615 +0000 UTC m=+435.660310058 I0709 13:17:54.789667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fqbsk" condition "Ready" to 2026-07-09 13:17:54.789653063 +0000 UTC m=+435.681274516 I0709 13:17:54.919512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:55.216102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cvd9" condition "Approved" to 2026-07-09 13:17:55.216076203 +0000 UTC m=+436.107697646 I0709 13:17:55.825505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cvd9" condition "Ready" to 2026-07-09 13:17:55.82549111 +0000 UTC m=+436.717112573 I0709 13:17:55.918140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rtx4f" condition "Approved" to 2026-07-09 13:17:55.918123502 +0000 UTC m=+436.809744945 I0709 13:17:55.964238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:56.419837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rtx4f" condition "Ready" to 2026-07-09 13:17:56.419828601 +0000 UTC m=+437.311450034 I0709 13:17:56.560801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:56.612958 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:56.61294709 +0000 UTC m=+437.504568533 I0709 13:17:56.813330 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-rtx4f" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-2rc9m" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0709 13:17:56.912567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:56.913045 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:56.913038425 +0000 UTC m=+437.804659868 I0709 13:17:57.320225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xvc28" condition "Approved" to 2026-07-09 13:17:57.3202114 +0000 UTC m=+438.211832843 I0709 13:17:57.377963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:57.414646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:57.477685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xvc28" condition "Ready" to 2026-07-09 13:17:57.477673952 +0000 UTC m=+438.369295405 I0709 13:17:58.055246 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:58.05523191 +0000 UTC m=+438.946853353 I0709 13:17:58.110318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:17:58.110806 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:17:58.110798913 +0000 UTC m=+439.002420346 I0709 13:17:58.314504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:03.056134 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Ready" to 2026-07-09 13:18:03.05611586 +0000 UTC m=+443.947737333 I0709 13:18:03.056324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:18:03.056472 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Issuing" to 2026-07-09 13:18:03.056451368 +0000 UTC m=+443.948072831 I0709 13:18:03.069516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-74jvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:03.069656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:18:03.069761 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Issuing" to 2026-07-09 13:18:03.069753038 +0000 UTC m=+443.961374481 I0709 13:18:03.313029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-74jvb-62xv2" condition "Approved" to 2026-07-09 13:18:03.313017444 +0000 UTC m=+444.204638877 I0709 13:18:03.330566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-74jvb-62xv2" condition "Ready" to 2026-07-09 13:18:03.33055394 +0000 UTC m=+444.222175373 I0709 13:18:03.359296 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:03.359282039 +0000 UTC m=+444.250903482 I0709 13:18:03.387229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-74jvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:03.387607 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:03.387599998 +0000 UTC m=+444.279221431 I0709 13:18:03.413479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-74jvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:03.415260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-74jvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:03.415505 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:03.415498238 +0000 UTC m=+444.307119671 I0709 13:18:03.422390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-74jvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-74jvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:14.960971 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 13:18:14.960948854 +0000 UTC m=+455.852570297 I0709 13:18:14.961224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:18:14.961262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 13:18:14.961251911 +0000 UTC m=+455.852873334 I0709 13:18:14.981424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:14.981480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:18:14.981497 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 13:18:14.981492182 +0000 UTC m=+455.873113605 I0709 13:18:15.357927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-42bgx" condition "Approved" to 2026-07-09 13:18:15.3579141 +0000 UTC m=+456.249535543 I0709 13:18:15.394764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-42bgx" condition "Ready" to 2026-07-09 13:18:15.39468245 +0000 UTC m=+456.286303883 I0709 13:18:15.441322 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:15.441303318 +0000 UTC m=+456.332924741 I0709 13:18:15.473299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:15.473703 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:15.47369437 +0000 UTC m=+456.365315803 I0709 13:18:15.511789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:15.515075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:18:15.515371 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:18:15.515362009 +0000 UTC m=+456.406983452 I0709 13:21:39.100729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:21:39.100840 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 13:21:39.100825537 +0000 UTC m=+659.992447010 I0709 13:21:39.100868 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 13:21:39.100857027 +0000 UTC m=+659.992478460 I0709 13:21:39.122239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:21:39.122322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:21:39.122351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 13:21:39.122341301 +0000 UTC m=+660.013962774 I0709 13:21:39.304295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:21:39.310730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f7qnr" condition "Approved" to 2026-07-09 13:21:39.310721686 +0000 UTC m=+660.202343119 I0709 13:21:39.331296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f7qnr" condition "Ready" to 2026-07-09 13:21:39.331283553 +0000 UTC m=+660.222904996 I0709 13:21:39.367096 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:21:39.367077374 +0000 UTC m=+660.258698817 I0709 13:21:39.385981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:21:39.386376 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:21:39.386370416 +0000 UTC m=+660.277991849 I0709 13:21:39.406656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:22:24.341287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 13:22:24.341358 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-09 13:22:24.341350587 +0000 UTC m=+705.232972030 I0709 13:22:24.341354 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 13:22:24.341339037 +0000 UTC m=+705.232960520 I0709 13:22:24.361343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:22:24.361435 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 13:22:24.361427304 +0000 UTC m=+705.253048747 I0709 13:22:24.713384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 13:22:24.748801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-89srt" condition "Approved" to 2026-07-09 13:22:24.748789954 +0000 UTC m=+705.640411397 I0709 13:22:24.770268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-89srt" condition "Ready" to 2026-07-09 13:22:24.770257237 +0000 UTC m=+705.661878680 I0709 13:22:24.802339 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 13:22:24.802327464 +0000 UTC m=+705.693948897 I0709 13:22:24.826493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"