I0406 21:00:12.163403 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0406 21:00:12.163536 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0406 21:00:12.163626 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0406 21:00:12.170915 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0406 21:00:12.171429 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0406 21:00:12.171458 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0406 21:00:12.171501 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0406 21:00:12.175147 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0406 21:00:12.192775 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0406 21:00:12.193023 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0406 21:00:12.193060 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0406 21:00:12.193076 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0406 21:00:12.196349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0406 21:00:12.200027 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0406 21:00:12.206032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0406 21:00:12.210314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0406 21:00:12.212412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0406 21:00:12.214220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0406 21:00:12.216133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0406 21:00:12.217942 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0406 21:00:12.223536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0406 21:00:12.227986 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0406 21:00:12.228010 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0406 21:00:12.228019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0406 21:00:12.230575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0406 21:00:12.233372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0406 21:00:12.235872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0406 21:00:12.239578 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0406 21:00:12.239865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0406 21:00:12.241528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0406 21:00:12.243240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0406 21:00:12.245148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0406 21:00:12.251954 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0406 21:00:12.254106 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.254610 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.254960 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.255092 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.255548 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.255640 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.256014 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.256316 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.257443 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:12.335903 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 21:00:25.081300 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-06 21:00:25.081277104 +0000 UTC m=+12.946731501 I0406 21:00:25.876397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:00:25.876439 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 21:00:25.876428531 +0000 UTC m=+13.741882918 I0406 21:00:25.876540 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 21:00:25.876523345 +0000 UTC m=+13.741977742 E0406 21:00:25.889187 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 21:00:25.889249 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-06 21:00:25.889241872 +0000 UTC m=+13.754696229 E0406 21:00:25.889275 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 21:00:25.891519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:25.891593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:00:25.891613 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 21:00:25.891608485 +0000 UTC m=+13.757062842 E0406 21:00:25.902134 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0406 21:00:25.902374 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 21:00:25.902406 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 21:00:25.902453 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0406 21:00:25.933218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k4lfs" condition "Approved" to 2026-04-06 21:00:25.933207956 +0000 UTC m=+13.798662323 I0406 21:00:25.944107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k4lfs" condition "Ready" to 2026-04-06 21:00:25.944098106 +0000 UTC m=+13.809552463 I0406 21:00:25.968456 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:00:25.968443756 +0000 UTC m=+13.833898113 I0406 21:00:25.994255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:25.994614 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:00:25.994604772 +0000 UTC m=+13.860059159 I0406 21:00:25.996320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:26.008591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:26.008933 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:00:26.008925152 +0000 UTC m=+13.874379529 I0406 21:00:30.903404 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:00:30.903385925 +0000 UTC m=+18.768840322 I0406 21:00:53.528297 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 21:00:53.528271515 +0000 UTC m=+41.393725882 I0406 21:00:53.528702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:00:53.529389 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 21:00:53.529333132 +0000 UTC m=+41.394787529 I0406 21:00:53.541821 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-06 21:00:53.541811569 +0000 UTC m=+41.407265926 I0406 21:00:53.579024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:53.579976 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 21:00:53.579961573 +0000 UTC m=+41.445415930 I0406 21:00:53.787381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:00:53.823862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x8psj" condition "Approved" to 2026-04-06 21:00:53.823849954 +0000 UTC m=+41.689304351 I0406 21:00:53.851886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x8psj" condition "Ready" to 2026-04-06 21:00:53.851875324 +0000 UTC m=+41.717329691 I0406 21:00:53.883532 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:00:53.883522472 +0000 UTC m=+41.748976839 I0406 21:00:53.905873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:05:10.735020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:05:10.735064 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-06 21:05:10.735049931 +0000 UTC m=+298.600504298 I0406 21:05:10.735093 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-06 21:05:10.734529884 +0000 UTC m=+298.599984251 I0406 21:05:10.750584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:05:10.750649 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-06 21:05:10.75064288 +0000 UTC m=+298.616097237 I0406 21:05:11.174531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:05:11.201491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-xcz4c" condition "Approved" to 2026-04-06 21:05:11.20144214 +0000 UTC m=+299.066896527 I0406 21:05:11.226036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-xcz4c" condition "Ready" to 2026-04-06 21:05:11.226021814 +0000 UTC m=+299.091476181 I0406 21:05:11.250813 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:05:11.250802525 +0000 UTC m=+299.116256892 I0406 21:05:11.266741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:05:11.300968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:06:15.935802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:06:15.935833 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-06 21:06:15.935825469 +0000 UTC m=+363.801279836 I0406 21:06:15.935870 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 21:06:15.93584862 +0000 UTC m=+363.801303007 I0406 21:06:15.950656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:06:15.950717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 21:06:15.950710367 +0000 UTC m=+363.816164734 E0406 21:06:15.951151 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 21:06:15.951174 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-06 21:06:15.951169749 +0000 UTC m=+363.816624116 E0406 21:06:15.951417 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 21:06:15.963161 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0406 21:06:15.963332 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 21:06:15.963361 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 21:06:15.963401 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0406 21:06:15.967480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:06:15.991483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dvzqg" condition "Approved" to 2026-04-06 21:06:15.991464801 +0000 UTC m=+363.856919168 I0406 21:06:16.005923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dvzqg" condition "Ready" to 2026-04-06 21:06:16.005909088 +0000 UTC m=+363.871363505 I0406 21:06:16.026285 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:06:16.026262868 +0000 UTC m=+363.891717235 I0406 21:06:16.045990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:06:20.964140 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:06:20.964130466 +0000 UTC m=+368.829584833 I0406 21:07:01.401961 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-06 21:07:01.40194246 +0000 UTC m=+409.267396817 I0406 21:07:01.402318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:01.402335 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 21:07:01.402332209 +0000 UTC m=+409.267786566 I0406 21:07:01.402586 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-06 21:07:01.402581424 +0000 UTC m=+409.268035801 I0406 21:07:01.402793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:01.402808 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 21:07:01.402804939 +0000 UTC m=+409.268259306 I0406 21:07:01.405713 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-06 21:07:01.405706475 +0000 UTC m=+409.271160852 I0406 21:07:01.405922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:01.405942 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 21:07:01.405938551 +0000 UTC m=+409.271392918 I0406 21:07:01.437284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.437374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-06 21:07:01.437368578 +0000 UTC m=+409.302822935 I0406 21:07:01.453018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.453490 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-06 21:07:01.453284442 +0000 UTC m=+409.318738799 I0406 21:07:01.471497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.471566 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-06 21:07:01.47156005 +0000 UTC m=+409.337014417 I0406 21:07:01.577949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.589497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.617466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p8cz6" condition "Approved" to 2026-04-06 21:07:01.617455911 +0000 UTC m=+409.482910278 I0406 21:07:01.618325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgcq2" condition "Approved" to 2026-04-06 21:07:01.61831637 +0000 UTC m=+409.483770727 I0406 21:07:01.640582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p8cz6" condition "Ready" to 2026-04-06 21:07:01.640571279 +0000 UTC m=+409.506025646 I0406 21:07:01.641148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgcq2" condition "Ready" to 2026-04-06 21:07:01.641143692 +0000 UTC m=+409.506598049 I0406 21:07:01.660015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.669437 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:01.669427808 +0000 UTC m=+409.534882165 I0406 21:07:01.680211 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:01.680199514 +0000 UTC m=+409.545653871 I0406 21:07:01.686336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.736067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hj847" condition "Approved" to 2026-04-06 21:07:01.736057409 +0000 UTC m=+409.601511766 I0406 21:07:01.831259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:01.831800 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:01.831790205 +0000 UTC m=+409.697244602 I0406 21:07:01.997367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hj847" condition "Ready" to 2026-04-06 21:07:01.997359136 +0000 UTC m=+409.862813493 I0406 21:07:02.631237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:02.800781 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:02.800764835 +0000 UTC m=+410.666219192 I0406 21:07:02.982598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:02.982969 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:02.982960624 +0000 UTC m=+410.848414991 I0406 21:07:03.184072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:09.143246 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" condition "Ready" to 2026-04-06 21:07:09.143228309 +0000 UTC m=+417.008682656 I0406 21:07:09.143698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:09.143745 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" condition "Issuing" to 2026-04-06 21:07:09.14373474 +0000 UTC m=+417.009189117 I0406 21:07:09.166180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:09.166280 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" condition "Ready" to 2026-04-06 21:07:09.166273854 +0000 UTC m=+417.031728211 I0406 21:07:09.470871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:09.633295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q8hhm-2hmq2" condition "Approved" to 2026-04-06 21:07:09.633276695 +0000 UTC m=+417.498731092 I0406 21:07:09.670820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q8hhm-2hmq2" condition "Ready" to 2026-04-06 21:07:09.670811095 +0000 UTC m=+417.536265442 I0406 21:07:09.723917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:09.723899533 +0000 UTC m=+417.589353900 I0406 21:07:09.761161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hhm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:20.772210 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-06 21:07:20.772184669 +0000 UTC m=+428.637639036 I0406 21:07:20.773298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:20.773313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 21:07:20.773309974 +0000 UTC m=+428.638764331 I0406 21:07:20.790446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 21:07:20.790581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 21:07:20.790637 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 21:07:20.790631201 +0000 UTC m=+428.656085558 I0406 21:07:21.018168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hk49b" condition "Approved" to 2026-04-06 21:07:21.018157049 +0000 UTC m=+428.883611416 I0406 21:07:21.038527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hk49b" condition "Ready" to 2026-04-06 21:07:21.038517142 +0000 UTC m=+428.903971499 I0406 21:07:21.065965 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 21:07:21.065834876 +0000 UTC m=+428.931289243 I0406 21:07:21.089200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"