I0408 13:03:43.090924 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0408 13:03:43.091066 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0408 13:03:43.091335 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 13:03:43.096204 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0408 13:03:43.096683 1 controller.go:156] "cert-manager/controller: starting leader election" I0408 13:03:43.096766 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0408 13:03:43.096928 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0408 13:03:43.099497 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 13:03:43.117728 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0408 13:03:43.121722 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0408 13:03:43.128289 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0408 13:03:43.131263 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0408 13:03:43.131476 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0408 13:03:43.134085 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0408 13:03:43.136514 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0408 13:03:43.138928 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0408 13:03:43.141438 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0408 13:03:43.144244 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0408 13:03:43.150467 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0408 13:03:43.153317 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0408 13:03:43.155293 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0408 13:03:43.155311 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0408 13:03:43.155363 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0408 13:03:43.157410 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0408 13:03:43.159141 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0408 13:03:43.159285 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0408 13:03:43.160896 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0408 13:03:43.160928 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0408 13:03:43.161150 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0408 13:03:43.162897 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0408 13:03:43.164619 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0408 13:03:43.170800 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0408 13:03:43.175610 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0408 13:03:54.709222 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 13:03:54.709185639 +0000 UTC m=+11.655355860 I0408 13:03:55.503382 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 13:03:55.503358458 +0000 UTC m=+12.449528679 I0408 13:03:55.503501 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:03:55.503583 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 13:03:55.503571134 +0000 UTC m=+12.449741335 E0408 13:03:55.518441 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 13:03:55.518537 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 13:03:55.518527915 +0000 UTC m=+12.464698116 E0408 13:03:55.518564 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 13:03:55.520721 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:03:55.520807 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:03:55.520833 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 13:03:55.520824373 +0000 UTC m=+12.466994574 E0408 13:03:55.528787 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0408 13:03:55.528969 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 13:03:55.529016 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 13:03:55.529056 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0408 13:03:55.557325 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:03:55.558026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4pdjr" condition "Approved" to 2026-04-08 13:03:55.55801517 +0000 UTC m=+12.504185371 I0408 13:03:55.571520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4pdjr" condition "Ready" to 2026-04-08 13:03:55.571505768 +0000 UTC m=+12.517675969 I0408 13:03:55.596534 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:03:55.596512445 +0000 UTC m=+12.542682666 I0408 13:03:55.612792 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:03:55.613185 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:03:55.613176357 +0000 UTC m=+12.559346568 I0408 13:03:55.631527 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:00.529698 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:04:00.52967986 +0000 UTC m=+17.475850061 I0408 13:04:21.022089 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 13:04:21.022063047 +0000 UTC m=+37.968233278 I0408 13:04:21.022422 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:04:21.022541 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 13:04:21.022515229 +0000 UTC m=+37.968685810 I0408 13:04:21.033957 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 13:04:21.033940931 +0000 UTC m=+37.980111132 I0408 13:04:21.046134 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:21.046234 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:04:21.046269 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 13:04:21.046259878 +0000 UTC m=+37.992430089 I0408 13:04:21.327896 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:21.334229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-khls4" condition "Approved" to 2026-04-08 13:04:21.334210229 +0000 UTC m=+38.280380480 I0408 13:04:21.370498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-khls4" condition "Ready" to 2026-04-08 13:04:21.37047296 +0000 UTC m=+38.316643191 I0408 13:04:21.402182 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:04:21.402165023 +0000 UTC m=+38.348335214 I0408 13:04:21.430160 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:21.431073 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:04:21.431063307 +0000 UTC m=+38.377233508 I0408 13:04:21.445330 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:21.447458 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:04:21.447994 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:04:21.447985274 +0000 UTC m=+38.394155485 I0408 13:06:50.056504 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-21.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:06:50.056573 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Issuing" to 2026-04-08 13:06:50.056561548 +0000 UTC m=+187.002731779 I0408 13:06:50.056492 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Ready" to 2026-04-08 13:06:50.056452355 +0000 UTC m=+187.002622586 I0408 13:06:50.075907 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-21.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-21.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:06:50.076060 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-21.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:06:50.076093 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Issuing" to 2026-04-08 13:06:50.076086431 +0000 UTC m=+187.022256622 I0408 13:06:50.438146 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-21.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-21.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:06:50.446231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-21.nip.io-tls-hdhrr" condition "Approved" to 2026-04-08 13:06:50.44621419 +0000 UTC m=+187.392384421 I0408 13:06:50.478807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-21.nip.io-tls-hdhrr" condition "Ready" to 2026-04-08 13:06:50.47879299 +0000 UTC m=+187.424963181 I0408 13:06:50.509419 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:06:50.509402236 +0000 UTC m=+187.455572457 I0408 13:06:50.530878 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-21.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-21.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:06:50.531631 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:06:50.531622052 +0000 UTC m=+187.477792263 I0408 13:06:50.554177 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-21.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-21.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:06:50.554293 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-21.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-21.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:06:50.554740 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-21.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:06:50.554730974 +0000 UTC m=+187.500901175 I0408 13:07:52.810497 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:07:52.810554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 13:07:52.810534699 +0000 UTC m=+249.756704920 I0408 13:07:52.810745 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:07:52.810710554 +0000 UTC m=+249.756880765 E0408 13:07:52.831808 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 13:07:52.831848 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 13:07:52.831840426 +0000 UTC m=+249.778010617 E0408 13:07:52.831889 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 13:07:52.833317 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:52.833376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:07:52.833369636 +0000 UTC m=+249.779539837 E0408 13:07:52.847395 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0408 13:07:52.847535 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 13:07:52.847576 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 13:07:52.847621 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0408 13:07:52.848638 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:52.848690 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:07:52.848680556 +0000 UTC m=+249.794850747 I0408 13:07:52.852890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gz5vg" condition "Approved" to 2026-04-08 13:07:52.852877876 +0000 UTC m=+249.799048067 I0408 13:07:52.859105 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 13:07:52.859086118 +0000 UTC m=+249.805256319 I0408 13:07:52.865101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gz5vg" condition "Ready" to 2026-04-08 13:07:52.865086284 +0000 UTC m=+249.811256465 I0408 13:07:52.866314 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:52.887981 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:07:52.887960732 +0000 UTC m=+249.834130963 I0408 13:07:52.904714 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:52.905050 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:07:52.905042248 +0000 UTC m=+249.851212439 I0408 13:07:52.920014 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:52.921642 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:07:57.848097 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:07:57.848077644 +0000 UTC m=+254.794247865 I0408 13:08:38.232460 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:08:38.232513 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 13:08:38.232485515 +0000 UTC m=+295.178655706 I0408 13:08:38.232808 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 13:08:38.232804273 +0000 UTC m=+295.178974454 I0408 13:08:38.234478 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 13:08:38.234458888 +0000 UTC m=+295.180629089 I0408 13:08:38.234780 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:08:38.234799 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 13:08:38.234795837 +0000 UTC m=+295.180966028 I0408 13:08:38.247968 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:08:38.248018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 13:08:38.248007512 +0000 UTC m=+295.194177703 I0408 13:08:38.248709 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 13:08:38.24868385 +0000 UTC m=+295.194854061 I0408 13:08:38.270267 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.270348 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 13:08:38.270340212 +0000 UTC m=+295.216510403 I0408 13:08:38.273971 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.274046 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 13:08:38.274034121 +0000 UTC m=+295.220204332 I0408 13:08:38.274892 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.274963 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:08:38.274992 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 13:08:38.274985956 +0000 UTC m=+295.221156157 I0408 13:08:38.476010 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.517459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jnpj5" condition "Approved" to 2026-04-08 13:08:38.517441718 +0000 UTC m=+295.463611939 I0408 13:08:38.543084 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.545290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jnpj5" condition "Ready" to 2026-04-08 13:08:38.545276885 +0000 UTC m=+295.491447086 I0408 13:08:38.578545 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:38.578526329 +0000 UTC m=+295.524696530 I0408 13:08:38.598410 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.598805 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:38.598798233 +0000 UTC m=+295.544968414 I0408 13:08:38.616430 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.617042 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:38.617031552 +0000 UTC m=+295.563201743 I0408 13:08:38.618555 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:38.686495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mdg9h" condition "Approved" to 2026-04-08 13:08:38.686476907 +0000 UTC m=+295.632647108 I0408 13:08:38.707374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mdg9h" condition "Ready" to 2026-04-08 13:08:38.707358948 +0000 UTC m=+295.653529169 I0408 13:08:38.928617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7g8nk" condition "Approved" to 2026-04-08 13:08:38.92859661 +0000 UTC m=+295.874766841 I0408 13:08:38.976999 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:38.976975859 +0000 UTC m=+295.923146080 I0408 13:08:39.385312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7g8nk" condition "Ready" to 2026-04-08 13:08:39.385296903 +0000 UTC m=+296.331467104 I0408 13:08:39.476246 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:39.477034 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:39.477026657 +0000 UTC m=+296.423196858 I0408 13:08:39.585959 1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-7g8nk" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-gvwng" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0408 13:08:40.028057 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:40.079987 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:40.162656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lmk8k" condition "Approved" to 2026-04-08 13:08:40.162641159 +0000 UTC m=+297.108811350 I0408 13:08:40.292231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lmk8k" condition "Ready" to 2026-04-08 13:08:40.292210379 +0000 UTC m=+297.238380600 I0408 13:08:40.735753 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:40.735734619 +0000 UTC m=+297.681904820 I0408 13:08:40.827046 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:40.827852 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:40.827841604 +0000 UTC m=+297.774011795 I0408 13:08:41.030698 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.525968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Ready" to 2026-04-08 13:08:46.525934216 +0000 UTC m=+303.472104417 I0408 13:08:46.526259 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:08:46.526355 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Issuing" to 2026-04-08 13:08:46.526338606 +0000 UTC m=+303.472508827 I0408 13:08:46.542357 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.542463 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Ready" to 2026-04-08 13:08:46.542453829 +0000 UTC m=+303.488624020 I0408 13:08:46.720411 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.757298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rrbcs-jf6q4" condition "Approved" to 2026-04-08 13:08:46.757277809 +0000 UTC m=+303.703448010 I0408 13:08:46.782039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rrbcs-jf6q4" condition "Ready" to 2026-04-08 13:08:46.782023933 +0000 UTC m=+303.728194134 I0408 13:08:46.813880 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:46.813855128 +0000 UTC m=+303.760025339 I0408 13:08:46.834480 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.835432 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:46.835421267 +0000 UTC m=+303.781591468 I0408 13:08:46.843512 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.855816 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:08:46.856290 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:08:46.856282387 +0000 UTC m=+303.802452578 I0408 13:08:46.863062 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rrbcs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:09:08.230420 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 13:09:08.230393229 +0000 UTC m=+325.176563440 I0408 13:09:08.230911 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 13:09:08.230932 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 13:09:08.230928494 +0000 UTC m=+325.177098695 I0408 13:09:08.250017 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:09:08.250136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 13:09:08.250122799 +0000 UTC m=+325.196293000 I0408 13:09:08.384541 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:09:08.421901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v4f49" condition "Approved" to 2026-04-08 13:09:08.421881612 +0000 UTC m=+325.368051833 I0408 13:09:08.455190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v4f49" condition "Ready" to 2026-04-08 13:09:08.455176936 +0000 UTC m=+325.401347127 I0408 13:09:08.499119 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:09:08.499096055 +0000 UTC m=+325.445266256 I0408 13:09:08.519941 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 13:09:08.520647 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 13:09:08.520633494 +0000 UTC m=+325.466803725 I0408 13:09:08.545487 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"