I0408 13:01:39.233018       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0408 13:01:39.233197       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0408 13:01:39.233310       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0408 13:01:39.241463       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0408 13:01:39.242241       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0408 13:01:39.242273       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0408 13:01:39.242281       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0408 13:01:39.245264       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0408 13:01:39.265973       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0408 13:01:39.266305       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0408 13:01:39.266376       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0408 13:01:39.271815       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0408 13:01:39.274422       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0408 13:01:39.279814       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0408 13:01:39.282513       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0408 13:01:39.282698       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0408 13:01:39.285376       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0408 13:01:39.287696       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0408 13:01:39.289861       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0408 13:01:39.291475       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0408 13:01:39.294127       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0408 13:01:39.300408       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0408 13:01:39.303778       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0408 13:01:39.306461       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0408 13:01:39.309000       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0408 13:01:39.311663       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0408 13:01:39.313655       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0408 13:01:39.315536       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0408 13:01:39.317243       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0408 13:01:39.317267       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0408 13:01:39.317316       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0408 13:01:39.322288       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0408 13:01:39.322410       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0408 13:01:39.324590       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.325364       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.325807       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.326392       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.360638       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.382449       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.400600       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.416161       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.427129       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:39.439868       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 13:01:51.132227       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 13:01:51.132177017 +0000 UTC m=+11.930126841
I0408 13:01:51.843032       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:01:51.843075       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 13:01:51.843065671 +0000 UTC m=+12.641015505
I0408 13:01:51.843462       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 13:01:51.843450211 +0000 UTC m=+12.641400065
E0408 13:01:51.860249       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 13:01:51.860307       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 13:01:51.860296914 +0000 UTC m=+12.658246728
E0408 13:01:51.860559       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 13:01:51.863917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:01:51.864225       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:01:51.864414       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 13:01:51.864401995 +0000 UTC m=+12.662351849
E0408 13:01:51.874522       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0408 13:01:51.874720       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 13:01:51.874848       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 13:01:51.874925       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0408 13:01:51.901733       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:01:51.912035       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c5djz" condition "Approved" to 2026-04-08 13:01:51.912014812 +0000 UTC m=+12.709964646
I0408 13:01:51.925032       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c5djz" condition "Ready" to 2026-04-08 13:01:51.925004291 +0000 UTC m=+12.722954115
I0408 13:01:51.946587       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:01:51.94656964 +0000 UTC m=+12.744519474
I0408 13:01:51.967623       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:01:51.968261       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:01:51.96821233 +0000 UTC m=+12.766162164
I0408 13:01:51.979953       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:01:51.980858       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:01:51.981692       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:01:51.981674871 +0000 UTC m=+12.779624705
I0408 13:01:56.876244       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:01:56.876227429 +0000 UTC m=+17.674177253
I0408 13:02:20.390617       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:02:20.390794       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 13:02:20.390783774 +0000 UTC m=+41.188733578
I0408 13:02:20.390638       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 13:02:20.39062017 +0000 UTC m=+41.188569974
I0408 13:02:20.401898       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 13:02:20.401884027 +0000 UTC m=+41.199833831
I0408 13:02:20.415302       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:02:20.415383       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:02:20.415409       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 13:02:20.415399879 +0000 UTC m=+41.213349703
I0408 13:02:20.614077       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d2hvj" condition "Approved" to 2026-04-08 13:02:20.614066273 +0000 UTC m=+41.412016077
I0408 13:02:20.646982       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d2hvj" condition "Ready" to 2026-04-08 13:02:20.646971662 +0000 UTC m=+41.444921456
I0408 13:02:20.673399       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:02:20.673387031 +0000 UTC m=+41.471336845
I0408 13:02:20.691539       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:06:56.745551       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-08 13:06:56.745534082 +0000 UTC m=+317.543483906
I0408 13:06:56.745637       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:06:56.745737       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-04-08 13:06:56.745727266 +0000 UTC m=+317.543677091
I0408 13:06:56.762377       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:06:56.762441       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-08 13:06:56.762434231 +0000 UTC m=+317.560384035
I0408 13:06:56.919645       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:06:56.951232       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-vmfz4" condition "Approved" to 2026-04-08 13:06:56.951219376 +0000 UTC m=+317.749169180
I0408 13:06:56.979847       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-vmfz4" condition "Ready" to 2026-04-08 13:06:56.979833109 +0000 UTC m=+317.777782923
I0408 13:06:57.005881       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:06:57.005858121 +0000 UTC m=+317.803807955
I0408 13:06:57.023144       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:06:57.023642       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:06:57.023633442 +0000 UTC m=+317.821583276
I0408 13:06:57.042079       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:02.995450       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:02.995443       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:08:02.995426892 +0000 UTC m=+383.793376696
I0408 13:08:02.995498       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 13:08:02.995489253 +0000 UTC m=+383.793439087
E0408 13:08:03.022096       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 13:08:03.022175       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 13:08:03.022162719 +0000 UTC m=+383.820112523
E0408 13:08:03.022248       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 13:08:03.025234       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:03.025457       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:08:03.025444758 +0000 UTC m=+383.823394592
E0408 13:08:03.044437       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0408 13:08:03.044758       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 13:08:03.044901       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 13:08:03.045152       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0408 13:08:03.058780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:03.091642       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-clkd8" condition "Approved" to 2026-04-08 13:08:03.091626283 +0000 UTC m=+383.889576107
I0408 13:08:03.123539       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-clkd8" condition "Ready" to 2026-04-08 13:08:03.123513065 +0000 UTC m=+383.921462899
I0408 13:08:03.159581       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:03.159559549 +0000 UTC m=+383.957509373
I0408 13:08:03.177773       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:03.178269       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:03.178253292 +0000 UTC m=+383.976203116
I0408 13:08:03.196981       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:03.198948       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:08.045543       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:08.045529094 +0000 UTC m=+388.843478918
I0408 13:08:48.152608       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 13:08:48.152593712 +0000 UTC m=+428.950543506
I0408 13:08:48.153028       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:48.153094       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 13:08:48.153089045 +0000 UTC m=+428.951038849
I0408 13:08:48.158667       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 13:08:48.15865295 +0000 UTC m=+428.956602754
I0408 13:08:48.159013       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 13:08:48.159007298 +0000 UTC m=+428.956957112
I0408 13:08:48.159270       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:48.159313       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 13:08:48.159304985 +0000 UTC m=+428.957254789
I0408 13:08:48.159395       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:48.159426       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 13:08:48.159420658 +0000 UTC m=+428.957370482
I0408 13:08:48.185694       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.185771       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 13:08:48.185764334 +0000 UTC m=+428.983714118
I0408 13:08:48.186076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.186113       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:48.186126       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 13:08:48.186123593 +0000 UTC m=+428.984073387
I0408 13:08:48.189330       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.189382       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 13:08:48.189375541 +0000 UTC m=+428.987325345
I0408 13:08:48.299663       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.329460       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kvljl" condition "Approved" to 2026-04-08 13:08:48.329437217 +0000 UTC m=+429.127387051
I0408 13:08:48.347671       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kvljl" condition "Ready" to 2026-04-08 13:08:48.347655527 +0000 UTC m=+429.145605361
I0408 13:08:48.382256       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:48.382242553 +0000 UTC m=+429.180192377
I0408 13:08:48.401593       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.403297       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:48.403283502 +0000 UTC m=+429.201233306
I0408 13:08:48.410087       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.420556       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.420601       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.420958       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:48.420947289 +0000 UTC m=+429.218897093
I0408 13:08:48.439643       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.620930       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:48.634196       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7dztp" condition "Approved" to 2026-04-08 13:08:48.634180023 +0000 UTC m=+429.432129857
I0408 13:08:48.653321       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7dztp" condition "Ready" to 2026-04-08 13:08:48.653309306 +0000 UTC m=+429.451259120
I0408 13:08:48.874428       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:48.87439777 +0000 UTC m=+429.672347564
I0408 13:08:49.047178       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:49.047804       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:49.047793032 +0000 UTC m=+429.845742866
I0408 13:08:49.157192       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rkxg5" condition "Approved" to 2026-04-08 13:08:49.156914909 +0000 UTC m=+429.954864743
I0408 13:08:49.718325       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rkxg5" condition "Ready" to 2026-04-08 13:08:49.718305139 +0000 UTC m=+430.516254973
I0408 13:08:49.744347       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0408 13:08:49.788279       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-5b6h8\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0408 13:08:50.080489       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-rkxg5" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-bxdm2" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0408 13:08:50.199998       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-brqkv" condition "Approved" to 2026-04-08 13:08:50.199968611 +0000 UTC m=+430.997918435
I0408 13:08:50.257338       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-brqkv" condition "Ready" to 2026-04-08 13:08:50.257318518 +0000 UTC m=+431.055268322
I0408 13:08:50.768809       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:50.768793211 +0000 UTC m=+431.566743035
I0408 13:08:50.845974       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:50.846498       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:50.846487359 +0000 UTC m=+431.644437193
I0408 13:08:51.094190       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:51.146193       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:56.975499       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:08:56.975613       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" condition "Issuing" to 2026-04-08 13:08:56.975602832 +0000 UTC m=+437.773552646
I0408 13:08:56.975601       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" condition "Ready" to 2026-04-08 13:08:56.975567311 +0000 UTC m=+437.773517115
I0408 13:08:56.994720       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:56.994828       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" condition "Ready" to 2026-04-08 13:08:56.994815827 +0000 UTC m=+437.792765661
I0408 13:08:57.358200       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:57.390336       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlnd2-x4ffj" condition "Approved" to 2026-04-08 13:08:57.390321547 +0000 UTC m=+438.188271341
I0408 13:08:57.415284       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlnd2-x4ffj" condition "Ready" to 2026-04-08 13:08:57.41527288 +0000 UTC m=+438.213222674
I0408 13:08:57.444202       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:57.444168338 +0000 UTC m=+438.242118132
I0408 13:08:57.467292       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:08:57.514443       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlnd2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:09:22.382994       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 13:09:22.382970077 +0000 UTC m=+463.180919911
I0408 13:09:22.383106       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 13:09:22.383142       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 13:09:22.383130812 +0000 UTC m=+463.181080606
I0408 13:09:22.401392       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:09:22.402051       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 13:09:22.402037548 +0000 UTC m=+463.199987362
I0408 13:09:22.635244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:09:22.670367       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bb9z7" condition "Approved" to 2026-04-08 13:09:22.670351004 +0000 UTC m=+463.468300808
I0408 13:09:22.688785       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bb9z7" condition "Ready" to 2026-04-08 13:09:22.68877013 +0000 UTC m=+463.486719944
I0408 13:09:22.716486       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:09:22.716473439 +0000 UTC m=+463.514423243
I0408 13:09:22.733608       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 13:09:22.734063       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:09:22.734053854 +0000 UTC m=+463.532003658
I0408 13:09:22.757989       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"