I0428 13:48:34.658840 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 13:48:34.658950 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 13:48:34.659077 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 13:48:34.666130 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 13:48:34.666957 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 13:48:34.666980 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 13:48:34.667002 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 13:48:34.670693 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 13:48:34.685595 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 13:48:34.689520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 13:48:34.692622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 13:48:34.699867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 13:48:34.702502 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 13:48:34.702566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 13:48:34.704777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 13:48:34.706557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 13:48:34.708396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 13:48:34.710198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 13:48:34.712016 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 13:48:34.712038 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 13:48:34.712044 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 13:48:34.712110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 13:48:34.715435 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 13:48:34.718630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 13:48:34.721300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 13:48:34.723672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 13:48:34.725986 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 13:48:34.728173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 13:48:34.730028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 13:48:34.731878 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 13:48:34.731936 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 13:48:34.731953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 13:48:34.735498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 13:48:34.736210 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.742119 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.742358 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.742911 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.743030 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.743146 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.743606 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.744269 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.744526 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:34.832371 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:45.401842 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 13:48:45.401825872 +0000 UTC m=+10.777152799 I0428 13:48:46.101367 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 13:48:46.10135438 +0000 UTC m=+11.476681317 I0428 13:48:46.102399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:48:46.102538 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:48:46.102530657 +0000 UTC m=+11.477857584 E0428 13:48:46.116567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:48:46.116794 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 13:48:46.116784723 +0000 UTC m=+11.492111650 E0428 13:48:46.116854 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:48:46.119150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:46.119239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:48:46.119319 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:48:46.119312869 +0000 UTC m=+11.494639796 E0428 13:48:46.132418 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 13:48:46.132599 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:48:46.132691 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:48:46.132811 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 13:48:46.168525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4vmfb" condition "Approved" to 2026-04-28 13:48:46.16850969 +0000 UTC m=+11.543836617 I0428 13:48:46.182158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4vmfb" condition "Ready" to 2026-04-28 13:48:46.182146447 +0000 UTC m=+11.557473364 I0428 13:48:46.204904 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:46.204893866 +0000 UTC m=+11.580220793 I0428 13:48:46.224416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:46.268721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:51.132952 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:51.132933873 +0000 UTC m=+16.508260820 I0428 13:49:11.383505 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 13:49:11.383467409 +0000 UTC m=+36.758794366 I0428 13:49:11.383515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:49:11.383592 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:49:11.383580352 +0000 UTC m=+36.758907309 I0428 13:49:11.397810 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 13:49:11.397786606 +0000 UTC m=+36.773113523 I0428 13:49:11.416287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:49:11.416777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:49:11.416809 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:49:11.416800322 +0000 UTC m=+36.792127249 I0428 13:49:11.729899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v5g66" condition "Approved" to 2026-04-28 13:49:11.729889336 +0000 UTC m=+37.105216263 I0428 13:49:11.771106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v5g66" condition "Ready" to 2026-04-28 13:49:11.77109638 +0000 UTC m=+37.146423307 I0428 13:49:11.811418 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:49:11.811409583 +0000 UTC m=+37.186736500 I0428 13:49:11.830912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:49:11.831205 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:49:11.8311992 +0000 UTC m=+37.206526147 I0428 13:49:11.852118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.063246 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready" to 2026-04-28 13:53:12.063213726 +0000 UTC m=+277.438540683 I0428 13:53:12.063706 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:53:12.063738 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Issuing" to 2026-04-28 13:53:12.063729704 +0000 UTC m=+277.439056661 I0428 13:53:12.078045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.078095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:53:12.078150 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Issuing" to 2026-04-28 13:53:12.078145955 +0000 UTC m=+277.453472882 I0428 13:53:12.312490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.319362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-62ghj" condition "Approved" to 2026-04-28 13:53:12.319347868 +0000 UTC m=+277.694674795 I0428 13:53:12.351410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-62ghj" condition "Ready" to 2026-04-28 13:53:12.351399632 +0000 UTC m=+277.726726549 I0428 13:53:12.381486 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:12.381471885 +0000 UTC m=+277.756798822 I0428 13:53:12.400569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.401934 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:12.401927119 +0000 UTC m=+277.777254046 I0428 13:53:12.410646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.420936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:12.421479 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:12.42146787 +0000 UTC m=+277.796794827 I0428 13:54:27.001407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:54:27.001351371 +0000 UTC m=+352.376678338 I0428 13:54:27.001878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:27.001981 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 13:54:27.001917339 +0000 UTC m=+352.377244316 E0428 13:54:27.023097 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:54:27.023139 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 13:54:27.023129328 +0000 UTC m=+352.398456285 I0428 13:54:27.027010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.027836 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:54:27.027073471 +0000 UTC m=+352.402400398 E0428 13:54:27.028288 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:27.041278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 13:54:27.041626 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:27.041657 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:27.041747 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 13:54:27.044819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.044941 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:54:27.044932714 +0000 UTC m=+352.420259641 I0428 13:54:27.050872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rf75j" condition "Approved" to 2026-04-28 13:54:27.050859434 +0000 UTC m=+352.426186361 I0428 13:54:27.075505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rf75j" condition "Ready" to 2026-04-28 13:54:27.075471399 +0000 UTC m=+352.450798346 I0428 13:54:27.099810 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:27.09977723 +0000 UTC m=+352.475104177 I0428 13:54:27.119372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.119613 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:27.11960729 +0000 UTC m=+352.494934227 I0428 13:54:27.132120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.133732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.134064 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:27.134058457 +0000 UTC m=+352.509385394 I0428 13:54:27.135544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:32.041742 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:32.041729517 +0000 UTC m=+357.417056464 I0428 13:55:12.322916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:12.322967 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 13:55:12.322937351 +0000 UTC m=+397.698264268 I0428 13:55:12.329553 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 13:55:12.329542867 +0000 UTC m=+397.704869774 I0428 13:55:12.331177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 13:55:12.331170547 +0000 UTC m=+397.706497464 I0428 13:55:12.331387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:12.331407 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:55:12.33140457 +0000 UTC m=+397.706731487 I0428 13:55:12.367578 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 13:55:12.367565318 +0000 UTC m=+397.742892245 I0428 13:55:12.368156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:12.368188 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 13:55:12.368181506 +0000 UTC m=+397.743508433 I0428 13:55:12.416036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.416084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:12.416104 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:55:12.416100128 +0000 UTC m=+397.791427045 I0428 13:55:12.416273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.416309 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 13:55:12.41630588 +0000 UTC m=+397.791632797 I0428 13:55:12.417349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.417376 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 13:55:12.417373014 +0000 UTC m=+397.792699921 I0428 13:55:12.616306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6vxfc" condition "Approved" to 2026-04-28 13:55:12.616292799 +0000 UTC m=+397.991619726 I0428 13:55:12.633071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6vxfc" condition "Ready" to 2026-04-28 13:55:12.633062797 +0000 UTC m=+398.008389704 I0428 13:55:12.665938 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:12.665926982 +0000 UTC m=+398.041253889 I0428 13:55:12.687771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.688070 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:12.688063089 +0000 UTC m=+398.063390016 I0428 13:55:12.704987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.718764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.748108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.772266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xmt54" condition "Approved" to 2026-04-28 13:55:12.772254349 +0000 UTC m=+398.147581266 I0428 13:55:12.778448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.796128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xmt54" condition "Ready" to 2026-04-28 13:55:12.796118828 +0000 UTC m=+398.171445745 I0428 13:55:12.864386 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:12.864370062 +0000 UTC m=+398.239697009 I0428 13:55:12.967000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:12.968523 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:12.968517141 +0000 UTC m=+398.343844068 I0428 13:55:13.213431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:13.315462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:13.575851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nhmvc" condition "Approved" to 2026-04-28 13:55:13.575838099 +0000 UTC m=+398.951165016 I0428 13:55:13.829315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nhmvc" condition "Ready" to 2026-04-28 13:55:13.829304297 +0000 UTC m=+399.204631224 I0428 13:55:14.167065 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-nhmvc" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-dsjcl" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0428 13:55:14.319949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d47w8" condition "Approved" to 2026-04-28 13:55:14.319931741 +0000 UTC m=+399.695258698 I0428 13:55:14.632513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d47w8" condition "Ready" to 2026-04-28 13:55:14.632502571 +0000 UTC m=+400.007829498 E0428 13:55:14.711686 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-dsjcl\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0428 13:55:14.914976 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:14.914965932 +0000 UTC m=+400.290292859 I0428 13:55:15.013143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:15.013874 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:15.01386344 +0000 UTC m=+400.389190397 I0428 13:55:15.213735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:22.718521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:22.718560 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Issuing" to 2026-04-28 13:55:22.718550775 +0000 UTC m=+408.093877712 I0428 13:55:22.718718 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Ready" to 2026-04-28 13:55:22.718697757 +0000 UTC m=+408.094024714 I0428 13:55:22.745741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2n68-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:22.745843 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Ready" to 2026-04-28 13:55:22.745835005 +0000 UTC m=+408.121161932 I0428 13:55:22.848981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2n68-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:22.875266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c2n68-5vxq5" condition "Approved" to 2026-04-28 13:55:22.875254796 +0000 UTC m=+408.250581713 I0428 13:55:22.909619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c2n68-5vxq5" condition "Ready" to 2026-04-28 13:55:22.909600586 +0000 UTC m=+408.284927543 I0428 13:55:22.947138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:22.947127439 +0000 UTC m=+408.322454356 I0428 13:55:22.967680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2n68-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:22.968021 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:22.968012906 +0000 UTC m=+408.343339823 I0428 13:55:22.997051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2n68-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:22.997372 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2n68-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:22.997365103 +0000 UTC m=+408.372692030 I0428 13:55:33.618703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 13:55:33.618653361 +0000 UTC m=+418.993980308 I0428 13:55:33.618814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:33.618841 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 13:55:33.618835503 +0000 UTC m=+418.994162430 I0428 13:55:33.632862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:33.632949 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 13:55:33.632944293 +0000 UTC m=+419.008271210 I0428 13:55:33.759170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:33.795322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xp4lc" condition "Approved" to 2026-04-28 13:55:33.795311567 +0000 UTC m=+419.170638484 I0428 13:55:33.814066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xp4lc" condition "Ready" to 2026-04-28 13:55:33.814058365 +0000 UTC m=+419.189385282 I0428 13:55:33.847005 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:33.846986494 +0000 UTC m=+419.222313441 I0428 13:55:33.870247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:44.025052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:58:44.025570 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 13:58:44.025545389 +0000 UTC m=+609.400872356 I0428 13:58:44.026037 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 13:58:44.026021065 +0000 UTC m=+609.401348022 I0428 13:58:44.043588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:44.043668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:58:44.043685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 13:58:44.043680552 +0000 UTC m=+609.419007469 I0428 13:58:44.262827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:44.277857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2n2lx" condition "Approved" to 2026-04-28 13:58:44.275365588 +0000 UTC m=+609.650692515 I0428 13:58:44.299911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2n2lx" condition "Ready" to 2026-04-28 13:58:44.299899955 +0000 UTC m=+609.675226872 I0428 13:58:44.329420 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:58:44.3293999 +0000 UTC m=+609.704726817 I0428 13:58:44.360360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:44.360799 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:58:44.360790647 +0000 UTC m=+609.736117574 I0428 13:58:44.370203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:58:44.381627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:38.414187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:59:38.414256 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 13:59:38.414235199 +0000 UTC m=+663.789562126 I0428 13:59:38.414920 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 13:59:38.414914999 +0000 UTC m=+663.790241926 I0428 13:59:38.430674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:38.430732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:59:38.430745 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 13:59:38.430740883 +0000 UTC m=+663.806067800 I0428 13:59:38.759234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvks2" condition "Approved" to 2026-04-28 13:59:38.759217955 +0000 UTC m=+664.134544872 I0428 13:59:38.778496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvks2" condition "Ready" to 2026-04-28 13:59:38.778483379 +0000 UTC m=+664.153810316 I0428 13:59:38.807128 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:59:38.807117088 +0000 UTC m=+664.182444015 I0428 13:59:38.831886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:38.832228 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:59:38.832221823 +0000 UTC m=+664.207548740 I0428 13:59:38.856501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:38.866091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"