I0412 20:47:11.971876 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 20:47:11.972057 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 20:47:11.972271 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 20:47:11.976789 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 20:47:11.977201 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 20:47:11.977358 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 20:47:11.977389 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 20:47:11.983554 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 20:47:11.997879 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 20:47:12.003573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 20:47:12.006983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 20:47:12.008763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 20:47:12.010456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 20:47:12.016000 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 20:47:12.018900 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 20:47:12.018932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 20:47:12.018980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 20:47:12.021649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 20:47:12.023783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 20:47:12.025691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 20:47:12.027484 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 20:47:12.027559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 20:47:12.029874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 20:47:12.034845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 20:47:12.036782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 20:47:12.038751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 20:47:12.040487 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 20:47:12.040605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 20:47:12.042287 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 20:47:12.042308 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 20:47:12.042342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 20:47:12.044259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 20:47:12.046286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 20:47:12.049846 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.050544 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.050941 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.051323 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.070899 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.084216 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.100986 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.115895 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.130348 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:12.139870 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:47:23.180967 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 20:47:23.180945947 +0000 UTC m=+11.243826701 I0412 20:47:23.875628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:47:23.875656 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:47:23.875640923 +0000 UTC m=+11.938521687 I0412 20:47:23.875700 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 20:47:23.875690174 +0000 UTC m=+11.938570928 E0412 20:47:23.890245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:47:23.890377 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 20:47:23.890345592 +0000 UTC m=+11.953226326 E0412 20:47:23.890453 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:47:23.890677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:23.890755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:47:23.890774 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 20:47:23.890769243 +0000 UTC m=+11.953649957 E0412 20:47:23.901169 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 20:47:23.901735 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:47:23.901836 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:47:23.901981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 20:47:23.928762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:23.933850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m9r5k" condition "Approved" to 2026-04-12 20:47:23.933840203 +0000 UTC m=+11.996720937 I0412 20:47:23.950542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m9r5k" condition "Ready" to 2026-04-12 20:47:23.950528745 +0000 UTC m=+12.013409509 I0412 20:47:23.974127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:23.974104639 +0000 UTC m=+12.036985403 I0412 20:47:23.993759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:23.994088 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:23.994079508 +0000 UTC m=+12.056960262 I0412 20:47:24.004609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:24.007820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:24.008041 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:24.008033045 +0000 UTC m=+12.070913799 I0412 20:47:28.901933 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:28.90192285 +0000 UTC m=+16.964803584 I0412 20:47:49.879220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:47:49.879237 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 20:47:49.879206108 +0000 UTC m=+37.942086842 I0412 20:47:49.879287 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:47:49.87928246 +0000 UTC m=+37.942163194 I0412 20:47:49.890158 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 20:47:49.890146662 +0000 UTC m=+37.953027386 I0412 20:47:49.911472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:49.911526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:47:49.911554 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:47:49.911548538 +0000 UTC m=+37.974429272 I0412 20:47:50.102744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:50.114197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4ksg7" condition "Approved" to 2026-04-12 20:47:50.114186167 +0000 UTC m=+38.177066901 I0412 20:47:50.144310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4ksg7" condition "Ready" to 2026-04-12 20:47:50.144295714 +0000 UTC m=+38.207176448 I0412 20:47:50.170680 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:50.170666487 +0000 UTC m=+38.233547221 I0412 20:47:50.198756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:47:50.199027 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:47:50.19902088 +0000 UTC m=+38.261901614 I0412 20:47:50.221428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:51:53.782229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Ready" to 2026-04-12 20:51:53.782189047 +0000 UTC m=+281.845069811 I0412 20:51:53.782469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-10.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:51:53.782646 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Issuing" to 2026-04-12 20:51:53.782634626 +0000 UTC m=+281.845515400 I0412 20:51:53.798914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:51:53.799164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-10.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:51:53.799270 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Issuing" to 2026-04-12 20:51:53.799260032 +0000 UTC m=+281.862140796 I0412 20:51:53.964576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-10.nip.io-tls-zk6s7" condition "Approved" to 2026-04-12 20:51:53.964566549 +0000 UTC m=+282.027447283 I0412 20:51:53.986724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-10.nip.io-tls-zk6s7" condition "Ready" to 2026-04-12 20:51:53.986713483 +0000 UTC m=+282.049594217 I0412 20:51:54.007072 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:51:54.007057728 +0000 UTC m=+282.069938462 I0412 20:51:54.024264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:58.245508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:52:58.245515 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 20:52:58.245455384 +0000 UTC m=+346.308336148 I0412 20:52:58.245553 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 20:52:58.245542506 +0000 UTC m=+346.308423260 E0412 20:52:58.261427 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:52:58.261540 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 20:52:58.261528706 +0000 UTC m=+346.324409440 E0412 20:52:58.261611 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:52:58.263128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:58.263184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:52:58.263202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 20:52:58.263197555 +0000 UTC m=+346.326078279 E0412 20:52:58.274835 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 20:52:58.274887 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:52:58.274909 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:52:58.274936 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 20:52:58.296909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:58.303873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6qncp" condition "Approved" to 2026-04-12 20:52:58.303864724 +0000 UTC m=+346.366745458 I0412 20:52:58.313422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6qncp" condition "Ready" to 2026-04-12 20:52:58.313410106 +0000 UTC m=+346.376290840 I0412 20:52:58.336294 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:58.336277473 +0000 UTC m=+346.399158207 I0412 20:52:58.348848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:58.349203 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:58.349197093 +0000 UTC m=+346.412077827 I0412 20:52:58.361606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:58.361811 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:58.361801677 +0000 UTC m=+346.424682411 I0412 20:53:03.275880 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:03.275865974 +0000 UTC m=+351.338746728 I0412 20:53:45.031111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:53:45.031214 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 20:53:45.031204304 +0000 UTC m=+393.094085038 I0412 20:53:45.031847 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 20:53:45.031841213 +0000 UTC m=+393.094721947 I0412 20:53:45.036910 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 20:53:45.036904209 +0000 UTC m=+393.099784943 I0412 20:53:45.037262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:53:45.037445 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 20:53:45.037438967 +0000 UTC m=+393.100319701 I0412 20:53:45.037768 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 20:53:45.037762062 +0000 UTC m=+393.100642796 I0412 20:53:45.037885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:53:45.037937 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 20:53:45.037928515 +0000 UTC m=+393.100809239 I0412 20:53:45.066698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.067498 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 20:53:45.067488714 +0000 UTC m=+393.130369438 I0412 20:53:45.082498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.082571 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 20:53:45.082564849 +0000 UTC m=+393.145445573 I0412 20:53:45.082959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.083104 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 20:53:45.083095917 +0000 UTC m=+393.145976641 I0412 20:53:45.209916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.247086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5t8z4" condition "Approved" to 2026-04-12 20:53:45.247062158 +0000 UTC m=+393.309942912 I0412 20:53:45.268132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5t8z4" condition "Ready" to 2026-04-12 20:53:45.268116942 +0000 UTC m=+393.330997676 I0412 20:53:45.270936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.299892 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:45.299871715 +0000 UTC m=+393.362752439 I0412 20:53:45.302176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mbkgh" condition "Approved" to 2026-04-12 20:53:45.302169569 +0000 UTC m=+393.365050283 I0412 20:53:45.337145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mbkgh" condition "Ready" to 2026-04-12 20:53:45.33713478 +0000 UTC m=+393.400015504 I0412 20:53:45.341874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.342250 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:45.342240746 +0000 UTC m=+393.405121470 I0412 20:53:45.346280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.447878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.500731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.555813 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:45.555801157 +0000 UTC m=+393.618681871 I0412 20:53:45.755950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:45.756322 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:45.756316213 +0000 UTC m=+393.819196937 I0412 20:53:46.154603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2xm7" condition "Approved" to 2026-04-12 20:53:46.154532547 +0000 UTC m=+394.217413281 I0412 20:53:46.199172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:46.252890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:46.386096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2xm7" condition "Ready" to 2026-04-12 20:53:46.386078288 +0000 UTC m=+394.448959052 I0412 20:53:46.849109 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-m2xm7" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-g89q9" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0412 20:53:47.050795 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-g89q9\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0412 20:53:47.105118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w8mp8" condition "Approved" to 2026-04-12 20:53:47.105098666 +0000 UTC m=+395.167979410 I0412 20:53:47.195119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w8mp8" condition "Ready" to 2026-04-12 20:53:47.195100459 +0000 UTC m=+395.257981223 I0412 20:53:47.653163 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:47.653125448 +0000 UTC m=+395.716006182 I0412 20:53:47.758022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:52.907708 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" condition "Ready" to 2026-04-12 20:53:52.90768916 +0000 UTC m=+400.970569894 I0412 20:53:52.908023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:53:52.908105 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" condition "Issuing" to 2026-04-12 20:53:52.908095396 +0000 UTC m=+400.970976130 I0412 20:53:52.932174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-87d2k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:52.932966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" condition "Ready" to 2026-04-12 20:53:52.93224212 +0000 UTC m=+400.995122884 I0412 20:53:53.193538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-87d2k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:53.220404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-87d2k-8fg2w" condition "Approved" to 2026-04-12 20:53:53.220386193 +0000 UTC m=+401.283266917 I0412 20:53:53.244378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-87d2k-8fg2w" condition "Ready" to 2026-04-12 20:53:53.244365813 +0000 UTC m=+401.307246537 I0412 20:53:53.273224 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:53:53.273206215 +0000 UTC m=+401.336086939 I0412 20:53:53.310863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-87d2k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:53.381769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-87d2k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-87d2k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:05.164623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 20:54:05.164596467 +0000 UTC m=+413.227477191 I0412 20:54:05.164914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:54:05.164956 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 20:54:05.164948231 +0000 UTC m=+413.227828945 I0412 20:54:05.181640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:05.181729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:54:05.181790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 20:54:05.181781801 +0000 UTC m=+413.244662535 I0412 20:54:05.362727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qcdkn" condition "Approved" to 2026-04-12 20:54:05.362715093 +0000 UTC m=+413.425595817 I0412 20:54:05.382069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qcdkn" condition "Ready" to 2026-04-12 20:54:05.382055579 +0000 UTC m=+413.444936303 I0412 20:54:05.416613 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:05.41659943 +0000 UTC m=+413.479480164 I0412 20:54:05.443633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:05.444002 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:05.443993899 +0000 UTC m=+413.506874623 I0412 20:54:05.465766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:05.466140 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:05.466130894 +0000 UTC m=+413.529011618