I0507 13:45:22.088126 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0507 13:45:22.088371 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0507 13:45:22.088504 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0507 13:45:22.092604 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0507 13:45:22.092968 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0507 13:45:22.093056 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0507 13:45:22.093174 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0507 13:45:22.097935 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0507 13:45:22.110898 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0507 13:45:22.111097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0507 13:45:22.116482 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0507 13:45:22.116566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0507 13:45:22.120538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0507 13:45:22.122695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0507 13:45:22.128845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0507 13:45:22.132497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0507 13:45:22.134723 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0507 13:45:22.134748 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0507 13:45:22.134833 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0507 13:45:22.137280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0507 13:45:22.140001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0507 13:45:22.141889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0507 13:45:22.143432 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0507 13:45:22.143453 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0507 13:45:22.143548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0507 13:45:22.148197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0507 13:45:22.149874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0507 13:45:22.151643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0507 13:45:22.153436 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0507 13:45:22.155128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0507 13:45:22.157014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0507 13:45:22.158907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0507 13:45:22.160919 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0507 13:45:22.163052 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.164399 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.167993 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.180089 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.196689 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.210119 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.226305 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.244224 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.246049 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:22.264354 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:45:39.029085 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-07 13:45:39.029055071 +0000 UTC m=+16.983285742 I0507 13:45:39.695773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:45:39.695842 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 13:45:39.695834318 +0000 UTC m=+17.650064989 I0507 13:45:39.695822 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 13:45:39.695806737 +0000 UTC m=+17.650037458 E0507 13:45:39.712628 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:45:39.712680 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-07 13:45:39.712670808 +0000 UTC m=+17.666901469 E0507 13:45:39.712736 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:45:39.718748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:45:39.718818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:45:39.718835 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 13:45:39.718829055 +0000 UTC m=+17.673059696 E0507 13:45:39.733746 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0507 13:45:39.733836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:45:39.733873 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:45:39.733916 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0507 13:45:39.767260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xb699" condition "Approved" to 2026-05-07 13:45:39.767249188 +0000 UTC m=+17.721479829 I0507 13:45:39.782253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xb699" condition "Ready" to 2026-05-07 13:45:39.782240964 +0000 UTC m=+17.736471605 I0507 13:45:39.806608 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:45:39.806597074 +0000 UTC m=+17.760827695 I0507 13:45:39.821325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:45:44.734650 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:45:44.734605809 +0000 UTC m=+22.688836470 I0507 13:46:12.331391 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 13:46:12.331351077 +0000 UTC m=+50.285581718 I0507 13:46:12.331724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:46:12.331744 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 13:46:12.331739904 +0000 UTC m=+50.285970545 I0507 13:46:12.356328 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-07 13:46:12.356316071 +0000 UTC m=+50.310546712 I0507 13:46:12.364997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:46:12.365117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:46:12.365162 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 13:46:12.365155198 +0000 UTC m=+50.319385829 I0507 13:46:12.678763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2htkb" condition "Approved" to 2026-05-07 13:46:12.678751624 +0000 UTC m=+50.632982265 I0507 13:46:12.718734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2htkb" condition "Ready" to 2026-05-07 13:46:12.718723663 +0000 UTC m=+50.672954294 I0507 13:46:12.752103 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:46:12.752091577 +0000 UTC m=+50.706322208 I0507 13:46:12.799263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:51:08.903169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:51:08.903245 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-05-07 13:51:08.903229104 +0000 UTC m=+346.857459775 I0507 13:51:08.903892 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-05-07 13:51:08.903883737 +0000 UTC m=+346.858114408 I0507 13:51:08.922758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:51:08.923663 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-05-07 13:51:08.9236528 +0000 UTC m=+346.877883431 I0507 13:51:09.063863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:51:09.096688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-59wqb" condition "Approved" to 2026-05-07 13:51:09.096675894 +0000 UTC m=+347.050906535 I0507 13:51:09.129222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-59wqb" condition "Ready" to 2026-05-07 13:51:09.129207757 +0000 UTC m=+347.083438398 I0507 13:51:09.153890 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:51:09.153876914 +0000 UTC m=+347.108107555 I0507 13:51:09.177055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:51:09.177522 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:51:09.177514268 +0000 UTC m=+347.131744909 I0507 13:51:09.196844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:52:14.597357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:52:14.597488 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 13:52:14.597475732 +0000 UTC m=+412.551706403 I0507 13:52:14.597458 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 13:52:14.597427381 +0000 UTC m=+412.551658022 E0507 13:52:14.611218 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:52:14.611319 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-07 13:52:14.61130507 +0000 UTC m=+412.565535731 E0507 13:52:14.611362 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:52:14.615665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:52:14.615738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:52:14.615765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 13:52:14.615757753 +0000 UTC m=+412.569988394 E0507 13:52:14.618754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0507 13:52:14.618944 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:52:14.619005 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:52:14.619075 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0507 13:52:14.654569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:52:14.658340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ldsb6" condition "Approved" to 2026-05-07 13:52:14.658332578 +0000 UTC m=+412.612563209 I0507 13:52:14.671051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ldsb6" condition "Ready" to 2026-05-07 13:52:14.671041365 +0000 UTC m=+412.625272006 I0507 13:52:14.693638 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:52:14.693622777 +0000 UTC m=+412.647853448 I0507 13:52:14.708941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:52:14.709305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:52:14.70929895 +0000 UTC m=+412.663529591 I0507 13:52:14.723284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:52:14.723558 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:52:14.723550636 +0000 UTC m=+412.677781267 I0507 13:52:19.619642 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:52:19.619625493 +0000 UTC m=+417.573856154 I0507 13:53:00.063706 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:00.063735 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 13:53:00.063726348 +0000 UTC m=+458.017956979 I0507 13:53:00.063784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:00.063831 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 13:53:00.063828439 +0000 UTC m=+458.018059070 I0507 13:53:00.063957 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 13:53:00.063954001 +0000 UTC m=+458.018184632 I0507 13:53:00.064610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:00.064629 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 13:53:00.064626133 +0000 UTC m=+458.018856764 I0507 13:53:00.064762 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 13:53:00.064758105 +0000 UTC m=+458.018988726 I0507 13:53:00.063736 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 13:53:00.063721928 +0000 UTC m=+458.017952559 I0507 13:53:00.131102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:00.137803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:00.136679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:00.136790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:00.141368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:00.141411 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 13:53:00.141406633 +0000 UTC m=+458.095637274 I0507 13:53:00.141276 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 13:53:00.141260081 +0000 UTC m=+458.095490712 I0507 13:53:00.142342 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 13:53:00.14232712 +0000 UTC m=+458.096557761 I0507 13:53:00.427237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f6nl7" condition "Approved" to 2026-05-07 13:53:00.427227374 +0000 UTC m=+458.381458025 I0507 13:53:00.460081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f6nl7" condition "Ready" to 2026-05-07 13:53:00.460069818 +0000 UTC m=+458.414300469 I0507 13:53:00.493420 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:00.49340928 +0000 UTC m=+458.447639911 I0507 13:53:00.498658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:00.505571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7bv7k" condition "Approved" to 2026-05-07 13:53:00.505559842 +0000 UTC m=+458.459790483 I0507 13:53:00.519120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:00.525569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7bv7k" condition "Ready" to 2026-05-07 13:53:00.525558332 +0000 UTC m=+458.479789003 I0507 13:53:00.569529 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:00.569516719 +0000 UTC m=+458.523747350 I0507 13:53:00.611116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:01.154917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:01.550011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-529cf" condition "Approved" to 2026-05-07 13:53:01.549997877 +0000 UTC m=+459.504228518 I0507 13:53:01.571555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-529cf" condition "Ready" to 2026-05-07 13:53:01.571542933 +0000 UTC m=+459.525773574 I0507 13:53:01.611856 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:01.611845425 +0000 UTC m=+459.566076046 I0507 13:53:01.639865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:01.640173 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:01.640165739 +0000 UTC m=+459.594396380 I0507 13:53:01.849974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:01.890140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:15.488411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:15.488616 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" condition "Issuing" to 2026-05-07 13:53:15.48859824 +0000 UTC m=+473.442828921 I0507 13:53:15.488500 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" condition "Ready" to 2026-05-07 13:53:15.488478608 +0000 UTC m=+473.442709259 I0507 13:53:15.505142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6w74g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:15.505474 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" condition "Ready" to 2026-05-07 13:53:15.505465109 +0000 UTC m=+473.459695750 I0507 13:53:15.788917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6w74g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:15.819348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6w74g-gsrlr" condition "Approved" to 2026-05-07 13:53:15.819333533 +0000 UTC m=+473.773564164 I0507 13:53:15.841100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6w74g-gsrlr" condition "Ready" to 2026-05-07 13:53:15.841090106 +0000 UTC m=+473.795320727 I0507 13:53:15.869038 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:15.869022095 +0000 UTC m=+473.823252756 I0507 13:53:15.889066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6w74g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:15.889439 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:15.889429355 +0000 UTC m=+473.843660006 I0507 13:53:15.913071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6w74g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6w74g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:33.561332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:33.561407 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 13:53:33.56140134 +0000 UTC m=+491.515631971 I0507 13:53:33.561364 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 13:53:33.561349819 +0000 UTC m=+491.515580470 I0507 13:53:33.583422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:53:33.583522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:53:33.583545 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 13:53:33.583538143 +0000 UTC m=+491.537768784 I0507 13:53:34.607092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ldn6n" condition "Approved" to 2026-05-07 13:53:34.607071785 +0000 UTC m=+492.561302456 I0507 13:53:34.700000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ldn6n" condition "Ready" to 2026-05-07 13:53:34.699983877 +0000 UTC m=+492.654214548 I0507 13:53:34.735092 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:53:34.734894733 +0000 UTC m=+492.689125374 I0507 13:53:34.751980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"