I0624 17:09:58.960071 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 17:09:58.960175 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 17:09:58.960233 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 17:09:58.962544 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 17:09:58.962871 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 17:09:58.962889 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 17:09:58.963142 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 17:09:58.964933 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 17:09:58.976985 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 17:09:58.977181 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 17:09:58.982228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 17:09:58.986800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 17:09:58.988597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 17:09:58.990647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 17:09:58.993121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 17:09:58.995464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 17:09:58.995487 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 17:09:58.995496 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 17:09:58.995588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 17:09:58.999097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 17:09:59.007285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 17:09:59.011653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 17:09:59.014609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 17:09:59.017193 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 17:09:59.017296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 17:09:59.020055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 17:09:59.023100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 17:09:59.025688 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 17:09:59.027663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 17:09:59.032407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 17:09:59.035752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 17:09:59.038078 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 17:09:59.038484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 17:09:59.039970 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.040920 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.041213 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.058321 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.080471 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.091197 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.106908 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.117624 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.129304 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:59.144499 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:10:20.267389 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 17:10:20.26736423 +0000 UTC m=+21.345384535 I0624 17:10:20.992092 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 17:10:20.992081252 +0000 UTC m=+22.070101537 I0624 17:10:20.995282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:10:20.995443 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:10:20.995427744 +0000 UTC m=+22.073448039 E0624 17:10:21.007002 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:10:21.007095 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 17:10:21.007083892 +0000 UTC m=+22.085104187 E0624 17:10:21.007126 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:10:21.017572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:21.017674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:10:21.017703 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:10:21.017695093 +0000 UTC m=+22.095715378 E0624 17:10:21.024473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 17:10:21.024567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:10:21.024605 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:10:21.024654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 17:10:21.103631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k87lg" condition "Approved" to 2026-06-24 17:10:21.103619692 +0000 UTC m=+22.181639977 I0624 17:10:21.117689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k87lg" condition "Ready" to 2026-06-24 17:10:21.117678207 +0000 UTC m=+22.195698492 I0624 17:10:21.139564 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:21.139553885 +0000 UTC m=+22.217574170 I0624 17:10:21.162900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:21.167906 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:21.16788852 +0000 UTC m=+22.245908835 I0624 17:10:21.186879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:21.187271 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:21.187263016 +0000 UTC m=+22.265283301 I0624 17:10:26.024929 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:26.024908022 +0000 UTC m=+27.102928327 I0624 17:10:51.861234 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:10:51.861197759 +0000 UTC m=+52.939218024 I0624 17:10:51.861895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:10:51.861964 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:10:51.861955584 +0000 UTC m=+52.939975869 I0624 17:10:51.880032 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 17:10:51.880022631 +0000 UTC m=+52.958042896 I0624 17:10:51.897821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:51.898077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:10:51.898067986 +0000 UTC m=+52.976088271 I0624 17:10:52.100410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:52.135727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kzzvp" condition "Approved" to 2026-06-24 17:10:52.135715954 +0000 UTC m=+53.213736239 I0624 17:10:52.170563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kzzvp" condition "Ready" to 2026-06-24 17:10:52.170546616 +0000 UTC m=+53.248566901 I0624 17:10:52.207208 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:52.207197334 +0000 UTC m=+53.285217609 I0624 17:10:52.244523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:52.244842 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:52.244835452 +0000 UTC m=+53.322855737 I0624 17:10:52.274917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:10:52.275176 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:10:52.275170636 +0000 UTC m=+53.353190911 I0624 17:15:41.917071 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Ready" to 2026-06-24 17:15:41.917043737 +0000 UTC m=+342.995064022 I0624 17:15:41.917615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:15:41.917666 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Issuing" to 2026-06-24 17:15:41.91765658 +0000 UTC m=+342.995676885 I0624 17:15:41.931721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:41.931761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:15:41.931771 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Issuing" to 2026-06-24 17:15:41.931767196 +0000 UTC m=+343.009787461 I0624 17:15:42.042776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:42.060060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-128.nip.io-tls-bbv8j" condition "Approved" to 2026-06-24 17:15:42.060050825 +0000 UTC m=+343.138071110 I0624 17:15:42.095435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-128.nip.io-tls-bbv8j" condition "Ready" to 2026-06-24 17:15:42.09542512 +0000 UTC m=+343.173445405 I0624 17:15:42.122686 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:15:42.122672391 +0000 UTC m=+343.200692696 I0624 17:15:42.142022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:42.187787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:47.871288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:47.871329 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 17:16:47.871309572 +0000 UTC m=+408.949329867 I0624 17:16:47.871360 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 17:16:47.871346193 +0000 UTC m=+408.949366498 E0624 17:16:47.971318 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:16:47.971363 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 17:16:47.971355603 +0000 UTC m=+409.049375888 E0624 17:16:47.971411 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:16:47.974417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:47.974679 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 17:16:47.974665922 +0000 UTC m=+409.052686237 E0624 17:16:48.125305 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 17:16:48.125602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:16:48.125656 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:16:48.125696 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 17:16:48.178085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:48.203487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n7sms" condition "Approved" to 2026-06-24 17:16:48.203471257 +0000 UTC m=+409.281491562 I0624 17:16:48.215945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n7sms" condition "Ready" to 2026-06-24 17:16:48.215931617 +0000 UTC m=+409.293951902 I0624 17:16:48.237818 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:48.237800514 +0000 UTC m=+409.315820819 I0624 17:16:48.253366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:48.253750 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:48.253735535 +0000 UTC m=+409.331755830 I0624 17:16:48.270441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:53.125964 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:53.125947971 +0000 UTC m=+414.203968286 I0624 17:17:37.429170 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 17:17:37.429149349 +0000 UTC m=+458.507169624 I0624 17:17:37.429531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.430318 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 17:17:37.430313278 +0000 UTC m=+458.508333553 I0624 17:17:37.429733 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 17:17:37.429725248 +0000 UTC m=+458.507745533 I0624 17:17:37.429767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.430583 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 17:17:37.430579342 +0000 UTC m=+458.508599617 I0624 17:17:37.434678 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 17:17:37.43467288 +0000 UTC m=+458.512693155 I0624 17:17:37.435018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.436759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 17:17:37.435061607 +0000 UTC m=+458.513081892 I0624 17:17:37.464823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.464910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.464931 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 17:17:37.464926588 +0000 UTC m=+458.542946863 I0624 17:17:37.464982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.465066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.465099 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 17:17:37.465093541 +0000 UTC m=+458.543113816 I0624 17:17:37.482957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.483156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.483228 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 17:17:37.48322166 +0000 UTC m=+458.561241945 I0624 17:17:37.709263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j547x" condition "Approved" to 2026-06-24 17:17:37.709253963 +0000 UTC m=+458.787274248 I0624 17:17:37.731301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j547x" condition "Ready" to 2026-06-24 17:17:37.731292166 +0000 UTC m=+458.809312441 I0624 17:17:37.766314 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:37.766304153 +0000 UTC m=+458.844324438 I0624 17:17:37.804195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.899907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.900026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:37.906662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4bjv" condition "Approved" to 2026-06-24 17:17:37.906649715 +0000 UTC m=+458.984670000 I0624 17:17:37.927288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4bjv" condition "Ready" to 2026-06-24 17:17:37.927277444 +0000 UTC m=+459.005297719 I0624 17:17:37.996976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:37.997010 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 17:17:37.997002863 +0000 UTC m=+459.075023168 I0624 17:17:38.016772 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:38.016761578 +0000 UTC m=+459.094781853 I0624 17:17:38.164884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-79hmc" condition "Approved" to 2026-06-24 17:17:38.164874045 +0000 UTC m=+459.242894320 I0624 17:17:38.199932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:38.200250 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:38.200241587 +0000 UTC m=+459.278261872 I0624 17:17:38.306243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ddjv4" condition "Approved" to 2026-06-24 17:17:38.306230821 +0000 UTC m=+459.384251096 I0624 17:17:38.350149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0624 17:17:38.400082 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-qcjg5\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0624 17:17:38.759397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-79hmc" condition "Ready" to 2026-06-24 17:17:38.759384916 +0000 UTC m=+459.837405201 I0624 17:17:38.812388 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:38.812374669 +0000 UTC m=+459.890394954 I0624 17:17:38.865211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ddjv4" condition "Ready" to 2026-06-24 17:17:38.865199138 +0000 UTC m=+459.943219423 I0624 17:17:39.350651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0624 17:17:39.498581 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-675wz\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0624 17:17:39.655470 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:39.655461075 +0000 UTC m=+460.733481350 I0624 17:17:39.851940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:39.852825 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:39.852787538 +0000 UTC m=+460.930807853 I0624 17:17:39.984948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:40.301333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:40.402734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:40.449522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:47.181907 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" condition "Ready" to 2026-06-24 17:17:47.181884492 +0000 UTC m=+468.259904757 I0624 17:17:47.182141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:17:47.182337 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" condition "Issuing" to 2026-06-24 17:17:47.182183077 +0000 UTC m=+468.260203392 I0624 17:17:47.215431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-flkm5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:47.215533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" condition "Ready" to 2026-06-24 17:17:47.215520769 +0000 UTC m=+468.293541084 I0624 17:17:47.381940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-flkm5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:17:47.442605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-flkm5-6ddpv" condition "Approved" to 2026-06-24 17:17:47.442592476 +0000 UTC m=+468.520612761 I0624 17:17:47.477908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-flkm5-6ddpv" condition "Ready" to 2026-06-24 17:17:47.477892721 +0000 UTC m=+468.555913036 I0624 17:17:47.518766 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:47.518753226 +0000 UTC m=+468.596773521 I0624 17:17:47.538950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flkm5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-flkm5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:18:02.526859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:18:02.526902 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 17:18:02.526885813 +0000 UTC m=+483.604906098 I0624 17:18:02.527370 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 17:18:02.527355751 +0000 UTC m=+483.605376016 I0624 17:18:02.556505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:18:02.556605 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 17:18:02.556598869 +0000 UTC m=+483.634619144 I0624 17:18:03.087097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:18:03.112020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dh79l" condition "Approved" to 2026-06-24 17:18:03.112007193 +0000 UTC m=+484.190027458 I0624 17:18:03.137257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dh79l" condition "Ready" to 2026-06-24 17:18:03.137246487 +0000 UTC m=+484.215266772 I0624 17:18:03.174233 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:03.174220308 +0000 UTC m=+484.252240583 I0624 17:18:03.192606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:18:03.257855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:28.659226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 17:21:28.65920952 +0000 UTC m=+689.737229805 I0624 17:21:28.659499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:21:28.659588 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 17:21:28.659577716 +0000 UTC m=+689.737598031 I0624 17:21:28.681086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:28.681225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:21:28.681277 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 17:21:28.681243446 +0000 UTC m=+689.759263741 I0624 17:21:28.990630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:28.993109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4q8kt" condition "Approved" to 2026-06-24 17:21:28.993092864 +0000 UTC m=+690.071113149 I0624 17:21:29.021896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4q8kt" condition "Ready" to 2026-06-24 17:21:29.021887497 +0000 UTC m=+690.099907772 I0624 17:21:29.064693 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:21:29.064670089 +0000 UTC m=+690.142690394 I0624 17:21:29.091316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:29.092902 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:21:29.092894303 +0000 UTC m=+690.170914578 I0624 17:21:29.094506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:29.107046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:29.110145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:21:29.110433 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:21:29.110428565 +0000 UTC m=+690.188448840 I0624 17:22:10.872438 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 17:22:10.872387119 +0000 UTC m=+731.950407444 I0624 17:22:10.873186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:22:10.873209 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 17:22:10.873203989 +0000 UTC m=+731.951224284 I0624 17:22:10.895324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:22:10.895454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:22:10.895497 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 17:22:10.895489969 +0000 UTC m=+731.973510244 I0624 17:22:11.069155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-49dq2" condition "Approved" to 2026-06-24 17:22:11.069144468 +0000 UTC m=+732.147164743 I0624 17:22:11.097198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-49dq2" condition "Ready" to 2026-06-24 17:22:11.097181395 +0000 UTC m=+732.175201700 I0624 17:22:11.123124 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:22:11.123111836 +0000 UTC m=+732.201132111 I0624 17:22:11.141443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:22:11.187691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"