I0402 21:26:04.053719 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 21:26:04.053910 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 21:26:04.054012 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 21:26:04.060687 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 21:26:04.061710 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 21:26:04.061805 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 21:26:04.061822 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 21:26:04.064520 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 21:26:04.078510 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 21:26:04.078757 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 21:26:04.083765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 21:26:04.089439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 21:26:04.092403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 21:26:04.095243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 21:26:04.097947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 21:26:04.100838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 21:26:04.100901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 21:26:04.103689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 21:26:04.106117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 21:26:04.112316 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 21:26:04.112449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 21:26:04.116142 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 21:26:04.116259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 21:26:04.119235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 21:26:04.122093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 21:26:04.124812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 21:26:04.127141 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 21:26:04.127168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 21:26:04.127221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 21:26:04.129804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 21:26:04.134587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 21:26:04.139785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 21:26:04.143010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 21:26:04.146134 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.146139 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.146425 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.160036 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.176376 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.193882 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.215420 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.236484 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.298911 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:04.299761 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:17.326441 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 21:26:17.326417998 +0000 UTC m=+13.312183146 I0402 21:26:18.082450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:26:18.082495 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 21:26:18.082483817 +0000 UTC m=+14.068248935 I0402 21:26:18.082696 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 21:26:18.082678262 +0000 UTC m=+14.068443400 E0402 21:26:18.103501 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:26:18.103559 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 21:26:18.103549896 +0000 UTC m=+14.089315024 E0402 21:26:18.103587 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:26:18.105755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:18.105876 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 21:26:18.10586871 +0000 UTC m=+14.091633838 E0402 21:26:18.121328 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 21:26:18.121486 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:26:18.121552 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:26:18.121664 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 21:26:18.129135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:18.161024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gbmcb" condition "Approved" to 2026-04-02 21:26:18.161015105 +0000 UTC m=+14.146780203 I0402 21:26:18.177578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gbmcb" condition "Ready" to 2026-04-02 21:26:18.1775678 +0000 UTC m=+14.163332908 I0402 21:26:18.207282 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:18.207262787 +0000 UTC m=+14.193027925 I0402 21:26:18.230680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:18.231097 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:18.231090041 +0000 UTC m=+14.216855159 I0402 21:26:18.254574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:23.122736 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:23.122719037 +0000 UTC m=+19.108484185 I0402 21:26:50.258486 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 21:26:50.258466469 +0000 UTC m=+46.244231587 I0402 21:26:50.258887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:26:50.258993 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 21:26:50.2589843 +0000 UTC m=+46.244749408 I0402 21:26:50.271707 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 21:26:50.271694067 +0000 UTC m=+46.257459185 I0402 21:26:50.282717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:50.282810 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 21:26:50.282799527 +0000 UTC m=+46.268564655 I0402 21:26:50.673085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:50.707620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tcmcv" condition "Approved" to 2026-04-02 21:26:50.707609924 +0000 UTC m=+46.693375042 I0402 21:26:50.744470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tcmcv" condition "Ready" to 2026-04-02 21:26:50.744440394 +0000 UTC m=+46.730205542 I0402 21:26:50.777739 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:50.777728094 +0000 UTC m=+46.763493202 I0402 21:26:50.805114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:50.805756 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:50.805745425 +0000 UTC m=+46.791510543 I0402 21:26:50.837205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:50.837660 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:50.837652313 +0000 UTC m=+46.823417421 I0402 21:32:04.005433 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready" to 2026-04-02 21:32:04.005418166 +0000 UTC m=+359.991183314 I0402 21:32:04.005793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-12.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:04.005867 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Issuing" to 2026-04-02 21:32:04.005855096 +0000 UTC m=+359.991620204 I0402 21:32:04.021932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:04.022008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-12.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:04.022030 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Issuing" to 2026-04-02 21:32:04.022023671 +0000 UTC m=+360.007788789 I0402 21:32:04.154244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:04.165996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-mtwr8" condition "Approved" to 2026-04-02 21:32:04.165981193 +0000 UTC m=+360.151746341 I0402 21:32:04.193756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-mtwr8" condition "Ready" to 2026-04-02 21:32:04.19374317 +0000 UTC m=+360.179508278 I0402 21:32:04.223997 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:04.223980073 +0000 UTC m=+360.209745191 I0402 21:32:04.247227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:13.489318 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:33:13.489302213 +0000 UTC m=+429.475067331 I0402 21:33:13.489368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:13.489512 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 21:33:13.489496067 +0000 UTC m=+429.475261215 E0402 21:33:13.502334 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:33:13.502407 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 21:33:13.502399498 +0000 UTC m=+429.488164606 E0402 21:33:13.502432 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:33:13.506093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:13.506204 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:33:13.506193573 +0000 UTC m=+429.491958711 E0402 21:33:13.515070 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 21:33:13.515156 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:33:13.515304 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:33:13.515404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 21:33:13.524226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:13.554291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9s2ns" condition "Approved" to 2026-04-02 21:33:13.554273236 +0000 UTC m=+429.540038354 I0402 21:33:13.567455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9s2ns" condition "Ready" to 2026-04-02 21:33:13.567439833 +0000 UTC m=+429.553204951 I0402 21:33:13.589718 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:13.589704955 +0000 UTC m=+429.575470063 I0402 21:33:13.610418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:13.666049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:18.516279 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:18.516259506 +0000 UTC m=+434.502024644 I0402 21:33:58.575638 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 21:33:58.575626818 +0000 UTC m=+474.561391936 I0402 21:33:58.575994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:58.577928 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 21:33:58.577918658 +0000 UTC m=+474.563683786 I0402 21:33:58.590226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 21:33:58.590210126 +0000 UTC m=+474.575975244 I0402 21:33:58.591900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:58.591940 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 21:33:58.591935044 +0000 UTC m=+474.577700152 I0402 21:33:58.592173 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 21:33:58.59216779 +0000 UTC m=+474.577932908 I0402 21:33:58.592443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:58.592462 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:33:58.592457967 +0000 UTC m=+474.578223085 I0402 21:33:58.611112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:58.611192 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 21:33:58.611183488 +0000 UTC m=+474.596948626 I0402 21:33:58.627708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:58.627805 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 21:33:58.627798062 +0000 UTC m=+474.613563170 I0402 21:33:58.628442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:58.628487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:58.628506 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:33:58.628502168 +0000 UTC m=+474.614267276 I0402 21:33:58.707578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:58.736338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c4snz" condition "Approved" to 2026-04-02 21:33:58.736326188 +0000 UTC m=+474.722091296 I0402 21:33:58.765761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c4snz" condition "Ready" to 2026-04-02 21:33:58.76574696 +0000 UTC m=+474.751512098 I0402 21:33:58.801461 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:58.801448745 +0000 UTC m=+474.787213863 I0402 21:33:58.850260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:58.850595 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:58.850589482 +0000 UTC m=+474.836354590 I0402 21:33:58.870015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0402 21:33:58.878349 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-kvjlz\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0402 21:33:59.190503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:59.236663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5l5vg" condition "Approved" to 2026-04-02 21:33:59.23665107 +0000 UTC m=+475.222416178 I0402 21:33:59.261474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5l5vg" condition "Ready" to 2026-04-02 21:33:59.261464938 +0000 UTC m=+475.247230036 I0402 21:33:59.328404 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:59.328393456 +0000 UTC m=+475.314158594 I0402 21:33:59.354427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:59.521601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:59.574427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tfc7g" condition "Approved" to 2026-04-02 21:33:59.574409868 +0000 UTC m=+475.560175016 I0402 21:33:59.913334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tfc7g" condition "Ready" to 2026-04-02 21:33:59.913321584 +0000 UTC m=+475.899086722 I0402 21:34:00.135091 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:00.13507274 +0000 UTC m=+476.120837878 I0402 21:34:00.395142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:00.395546 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:00.395539138 +0000 UTC m=+476.381304256 I0402 21:34:00.524783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:11.391576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:34:11.391573 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" condition "Ready" to 2026-04-02 21:34:11.391554888 +0000 UTC m=+487.377320036 I0402 21:34:11.391614 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" condition "Issuing" to 2026-04-02 21:34:11.39160606 +0000 UTC m=+487.377371208 I0402 21:34:11.407981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p29fc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:11.408047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:34:11.408067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" condition "Issuing" to 2026-04-02 21:34:11.40806191 +0000 UTC m=+487.393827028 I0402 21:34:11.570174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p29fc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:11.581886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p29fc-vt9t5" condition "Approved" to 2026-04-02 21:34:11.581871446 +0000 UTC m=+487.567636574 I0402 21:34:11.600867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p29fc-vt9t5" condition "Ready" to 2026-04-02 21:34:11.600854903 +0000 UTC m=+487.586620021 I0402 21:34:11.653797 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:11.653785986 +0000 UTC m=+487.639551084 I0402 21:34:11.676656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p29fc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:11.677153 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:11.677134482 +0000 UTC m=+487.662899630 I0402 21:34:11.686280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p29fc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:11.697303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p29fc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p29fc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:44.984896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 21:34:44.984883634 +0000 UTC m=+520.970648742 I0402 21:34:44.985014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:34:44.985052 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 21:34:44.985042398 +0000 UTC m=+520.970807536 I0402 21:34:44.996999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:44.997056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:34:44.997071 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 21:34:44.99706453 +0000 UTC m=+520.982829648 I0402 21:34:45.410202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4tmxf" condition "Approved" to 2026-04-02 21:34:45.41018805 +0000 UTC m=+521.395953158 I0402 21:34:45.432665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4tmxf" condition "Ready" to 2026-04-02 21:34:45.432651628 +0000 UTC m=+521.418416756 I0402 21:34:45.467527 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:45.467511645 +0000 UTC m=+521.453276753 I0402 21:34:45.494671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:45.495071 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:45.495061117 +0000 UTC m=+521.480826255 I0402 21:34:45.496999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:45.517886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:34:45.518373 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:34:45.518359914 +0000 UTC m=+521.504125032