I0407 12:50:23.809380       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0407 12:50:23.809476       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0407 12:50:23.809551       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0407 12:50:23.814933       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0407 12:50:23.815383       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0407 12:50:23.815478       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0407 12:50:23.815506       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0407 12:50:23.820189       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0407 12:50:23.836056       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0407 12:50:23.841607       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0407 12:50:23.844967       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0407 12:50:23.851896       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0407 12:50:23.853934       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0407 12:50:23.856670       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0407 12:50:23.859197       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0407 12:50:23.861530       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0407 12:50:23.863465       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0407 12:50:23.863482       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0407 12:50:23.863658       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0407 12:50:23.867976       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0407 12:50:23.872266       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0407 12:50:23.872406       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0407 12:50:23.875319       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0407 12:50:23.878335       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0407 12:50:23.880459       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0407 12:50:23.882477       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0407 12:50:23.884718       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0407 12:50:23.886692       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0407 12:50:23.886714       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0407 12:50:23.886856       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0407 12:50:23.889095       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0407 12:50:23.890979       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0407 12:50:23.891616       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0407 12:50:23.896954       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.899688       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.900270       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.913460       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.927845       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.945855       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.964032       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.974890       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:23.984625       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:24.002845       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:50:36.136124       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 12:50:36.136107831 +0000 UTC m=+12.357161968
I0407 12:50:36.872667       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 12:50:36.872656519 +0000 UTC m=+13.093710616
I0407 12:50:36.872751       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:50:36.872819       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 12:50:36.872809019 +0000 UTC m=+13.093863146
E0407 12:50:36.887453       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 12:50:36.887519       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 12:50:36.887513701 +0000 UTC m=+13.108567798
E0407 12:50:36.887537       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 12:50:36.888456       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:50:36.888529       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:50:36.888550       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 12:50:36.888544622 +0000 UTC m=+13.109598729
E0407 12:50:36.899928       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0407 12:50:36.900058       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:50:36.900188       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:50:36.900264       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0407 12:50:36.934467       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dqlrp" condition "Approved" to 2026-04-07 12:50:36.934443948 +0000 UTC m=+13.155498055
I0407 12:50:36.953497       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dqlrp" condition "Ready" to 2026-04-07 12:50:36.953485711 +0000 UTC m=+13.174539818
I0407 12:50:36.976795       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:50:36.976783464 +0000 UTC m=+13.197837591
I0407 12:50:36.995920       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:50:37.036152       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:50:41.900803       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:50:41.90078514 +0000 UTC m=+18.121839287
I0407 12:51:04.026239       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:51:04.026337       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 12:51:04.026319948 +0000 UTC m=+40.247374055
I0407 12:51:04.026341       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 12:51:04.026332018 +0000 UTC m=+40.247386125
I0407 12:51:04.056382       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 12:51:04.056372051 +0000 UTC m=+40.277426148
I0407 12:51:04.066647       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:51:04.067196       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 12:51:04.067189078 +0000 UTC m=+40.288243175
I0407 12:51:04.178686       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:51:04.211335       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wvm26" condition "Approved" to 2026-04-07 12:51:04.211324986 +0000 UTC m=+40.432379083
I0407 12:51:04.243132       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wvm26" condition "Ready" to 2026-04-07 12:51:04.243119452 +0000 UTC m=+40.464173549
I0407 12:51:04.270899       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:51:04.270884902 +0000 UTC m=+40.491939039
I0407 12:51:04.288819       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:51:04.289053       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:51:04.289045257 +0000 UTC m=+40.510099364
I0407 12:51:04.293122       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:51:04.303562       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:51:04.303816       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:51:04.303810248 +0000 UTC m=+40.524864345
I0407 12:55:01.222949       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:55:01.222997       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-07 12:55:01.22298646 +0000 UTC m=+277.444040597
I0407 12:55:01.223231       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-07 12:55:01.223219291 +0000 UTC m=+277.444273438
I0407 12:55:01.256382       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:55:01.256480       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-07 12:55:01.256471129 +0000 UTC m=+277.477525256
I0407 12:55:01.336547       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:55:01.363743       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-4lkrz" condition "Approved" to 2026-04-07 12:55:01.363728428 +0000 UTC m=+277.584782565
I0407 12:55:01.392523       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-4lkrz" condition "Ready" to 2026-04-07 12:55:01.392514349 +0000 UTC m=+277.613568456
I0407 12:55:01.417183       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:55:01.417174817 +0000 UTC m=+277.638228924
I0407 12:55:01.437283       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:03.928860       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 12:56:03.928832143 +0000 UTC m=+340.149886240
I0407 12:56:03.929165       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:03.929223       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 12:56:03.92921211 +0000 UTC m=+340.150266207
I0407 12:56:03.940653       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:03.940704       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:03.940714       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 12:56:03.94071059 +0000 UTC m=+340.161764687
E0407 12:56:03.944418       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 12:56:03.944446       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 12:56:03.944441824 +0000 UTC m=+340.165495921
E0407 12:56:03.944512       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:56:03.957718       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0407 12:56:03.957790       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:56:03.957816       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:56:03.957844       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0407 12:56:03.977770       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-twjjk" condition "Approved" to 2026-04-07 12:56:03.977756349 +0000 UTC m=+340.198810486
I0407 12:56:03.979770       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:03.989207       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-twjjk" condition "Ready" to 2026-04-07 12:56:03.989194597 +0000 UTC m=+340.210248704
I0407 12:56:04.006637       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:04.006627997 +0000 UTC m=+340.227682094
I0407 12:56:04.028145       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:04.028843       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:04.028823354 +0000 UTC m=+340.249877461
I0407 12:56:04.039582       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:04.041398       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:04.041680       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:04.041672183 +0000 UTC m=+340.262726290
I0407 12:56:08.958480       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:08.958466578 +0000 UTC m=+345.179520705
I0407 12:56:47.862880       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 12:56:47.862847816 +0000 UTC m=+384.083901923
I0407 12:56:47.863177       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:47.863198       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 12:56:47.863194425 +0000 UTC m=+384.084248532
I0407 12:56:47.865316       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 12:56:47.865283933 +0000 UTC m=+384.086338060
I0407 12:56:47.865948       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:47.865983       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 12:56:47.865975582 +0000 UTC m=+384.087029689
I0407 12:56:47.866108       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 12:56:47.866102335 +0000 UTC m=+384.087156442
I0407 12:56:47.866329       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:47.866348       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 12:56:47.866344162 +0000 UTC m=+384.087398269
I0407 12:56:47.886871       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:47.886943       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:47.888156       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 12:56:47.888139174 +0000 UTC m=+384.109193341
I0407 12:56:47.900452       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:47.900528       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:47.900552       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 12:56:47.900545536 +0000 UTC m=+384.121599663
I0407 12:56:47.905231       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:47.905303       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 12:56:47.905296338 +0000 UTC m=+384.126350435
I0407 12:56:48.055973       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.058237       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xfcnb" condition "Approved" to 2026-04-07 12:56:48.058224969 +0000 UTC m=+384.279279076
I0407 12:56:48.074353       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xfcnb" condition "Ready" to 2026-04-07 12:56:48.074343436 +0000 UTC m=+384.295397533
I0407 12:56:48.100685       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:48.100657267 +0000 UTC m=+384.321711404
I0407 12:56:48.123468       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.132672       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.158733       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.225893       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.236864       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gbl9x" condition "Approved" to 2026-04-07 12:56:48.236850957 +0000 UTC m=+384.457905074
I0407 12:56:48.253166       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gbl9x" condition "Ready" to 2026-04-07 12:56:48.25315496 +0000 UTC m=+384.474209067
I0407 12:56:48.491772       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:48.491752644 +0000 UTC m=+384.712806751
I0407 12:56:48.681158       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:48.681434       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:48.68142759 +0000 UTC m=+384.902481697
I0407 12:56:48.788588       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dlg2" condition "Approved" to 2026-04-07 12:56:48.788568784 +0000 UTC m=+385.009622921
I0407 12:56:49.142413       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dlg2" condition "Ready" to 2026-04-07 12:56:49.142402837 +0000 UTC m=+385.363456944
I0407 12:56:49.434269       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:49.484205       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0407 12:56:49.526302       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-g2tfp\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0407 12:56:49.779773       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-5dlg2" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-sbh9t" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0407 12:56:49.938675       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2pnhv" condition "Approved" to 2026-04-07 12:56:49.938635515 +0000 UTC m=+386.159689642
I0407 12:56:50.297898       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2pnhv" condition "Ready" to 2026-04-07 12:56:50.297872202 +0000 UTC m=+386.518926309
I0407 12:56:50.484512       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:50.484499047 +0000 UTC m=+386.705553144
I0407 12:56:50.590091       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:55.829760       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" condition "Ready" to 2026-04-07 12:56:55.82973933 +0000 UTC m=+392.050793437
I0407 12:56:55.829786       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:55.830455       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" condition "Issuing" to 2026-04-07 12:56:55.83044924 +0000 UTC m=+392.051503337
I0407 12:56:55.849822       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7r59h-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:55.849980       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:55.850046       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" condition "Issuing" to 2026-04-07 12:56:55.850039033 +0000 UTC m=+392.071093130
I0407 12:56:56.531665       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7r59h-8c9nx" condition "Approved" to 2026-04-07 12:56:56.531653808 +0000 UTC m=+392.752707915
I0407 12:56:56.547663       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7r59h-8c9nx" condition "Ready" to 2026-04-07 12:56:56.54765475 +0000 UTC m=+392.768708847
I0407 12:56:56.572377       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:56.572363304 +0000 UTC m=+392.793417411
I0407 12:56:56.591505       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7r59h-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:56.592016       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:56.592010671 +0000 UTC m=+392.813064768
I0407 12:56:56.602151       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7r59h-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:56.613579       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7r59h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7r59h-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:57:08.179040       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 12:57:08.179027887 +0000 UTC m=+404.400081984
I0407 12:57:08.180587       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:57:08.180643       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 12:57:08.180631637 +0000 UTC m=+404.401685764
I0407 12:57:08.211198       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:57:08.211305       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:57:08.211328       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 12:57:08.21131963 +0000 UTC m=+404.432373767
I0407 12:57:08.412787       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jzqnd" condition "Approved" to 2026-04-07 12:57:08.412763752 +0000 UTC m=+404.633817839
I0407 12:57:08.428286       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jzqnd" condition "Ready" to 2026-04-07 12:57:08.428274173 +0000 UTC m=+404.649328280
I0407 12:57:08.460069       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:57:08.46005647 +0000 UTC m=+404.681110577
I0407 12:57:08.480431       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:57:08.481614       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:57:08.481604646 +0000 UTC m=+404.702658763
I0407 12:57:08.500801       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"