I0602 06:49:16.676586 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0602 06:49:16.676718 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0602 06:49:16.676826 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0602 06:49:16.681345 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0602 06:49:16.682090 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0602 06:49:16.682191 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0602 06:49:16.682284 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0602 06:49:16.685516 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0602 06:49:16.701047 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0602 06:49:16.707658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0602 06:49:16.710674 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0602 06:49:16.710706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0602 06:49:16.713476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0602 06:49:16.716069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0602 06:49:16.718972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0602 06:49:16.721671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0602 06:49:16.727668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0602 06:49:16.731642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0602 06:49:16.735182 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0602 06:49:16.735222 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0602 06:49:16.735282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0602 06:49:16.738900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0602 06:49:16.740764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0602 06:49:16.742718 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0602 06:49:16.742821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0602 06:49:16.747841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0602 06:49:16.751638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0602 06:49:16.756399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0602 06:49:16.758857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0602 06:49:16.760654 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0602 06:49:16.760707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0602 06:49:16.760715 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0602 06:49:16.763560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0602 06:49:16.766564 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.766760 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.767070 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.767208 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.783175 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.817844 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.832288 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.853278 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.862542 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:16.865961 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 06:49:28.165290 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-02 06:49:28.165260104 +0000 UTC m=+11.528792629 I0602 06:49:28.916249 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 06:49:28.916232973 +0000 UTC m=+12.279765498 I0602 06:49:28.916270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:49:28.916361 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 06:49:28.916352468 +0000 UTC m=+12.279884953 I0602 06:49:28.939359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:28.939569 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 06:49:28.939559734 +0000 UTC m=+12.303092219 E0602 06:49:28.943927 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 06:49:28.944050 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-02 06:49:28.944043236 +0000 UTC m=+12.307575721 E0602 06:49:28.944120 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 06:49:28.956610 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0602 06:49:28.956704 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 06:49:28.956899 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 06:49:28.956942 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0602 06:49:28.957390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9vmw7" condition "Approved" to 2026-06-02 06:49:28.957379797 +0000 UTC m=+12.320912282 I0602 06:49:28.958031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:28.961294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:28.961381 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 06:49:28.961372347 +0000 UTC m=+12.324904832 I0602 06:49:28.971842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9vmw7" condition "Ready" to 2026-06-02 06:49:28.971831258 +0000 UTC m=+12.335363743 I0602 06:49:28.993506 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:28.993488824 +0000 UTC m=+12.357021339 I0602 06:49:29.010108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:29.010576 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:29.010569179 +0000 UTC m=+12.374101684 I0602 06:49:29.025620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:29.025902 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:29.025895947 +0000 UTC m=+12.389428432 I0602 06:49:29.026603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:29.029873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:33.957358 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:33.957346571 +0000 UTC m=+17.320879066 I0602 06:49:58.489205 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 06:49:58.488994194 +0000 UTC m=+41.852526689 I0602 06:49:58.489540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:49:58.490561 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 06:49:58.490555493 +0000 UTC m=+41.854087998 I0602 06:49:58.509463 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-02 06:49:58.50945005 +0000 UTC m=+41.872982545 I0602 06:49:58.525226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:58.525417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:49:58.525470 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 06:49:58.525465661 +0000 UTC m=+41.888998146 I0602 06:49:58.703765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-47q5t" condition "Approved" to 2026-06-02 06:49:58.703752739 +0000 UTC m=+42.067285244 I0602 06:49:58.744255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-47q5t" condition "Ready" to 2026-06-02 06:49:58.744235785 +0000 UTC m=+42.107768280 I0602 06:49:58.773178 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:58.773161192 +0000 UTC m=+42.136693687 I0602 06:49:58.804187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:49:58.804701 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:49:58.804686869 +0000 UTC m=+42.168219384 I0602 06:49:58.844636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:54:14.342795 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready" to 2026-06-02 06:54:14.342754837 +0000 UTC m=+297.706287332 I0602 06:54:14.342966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:54:14.343010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Issuing" to 2026-06-02 06:54:14.343002434 +0000 UTC m=+297.706534929 I0602 06:54:14.360849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:54:14.360943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:54:14.360970 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Issuing" to 2026-06-02 06:54:14.360962469 +0000 UTC m=+297.724494995 I0602 06:54:14.604088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:54:14.612305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-78.nip.io-tls-fnpgh" condition "Approved" to 2026-06-02 06:54:14.612295049 +0000 UTC m=+297.975827544 I0602 06:54:14.639512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-78.nip.io-tls-fnpgh" condition "Ready" to 2026-06-02 06:54:14.63950392 +0000 UTC m=+298.003036405 I0602 06:54:14.671831 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:54:14.671818044 +0000 UTC m=+298.035350549 I0602 06:54:14.688135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:54:14.688411 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:54:14.688405757 +0000 UTC m=+298.051938262 I0602 06:54:14.712476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:55:21.662737 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 06:55:21.662699526 +0000 UTC m=+365.026232041 I0602 06:55:21.662857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:55:21.663459 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 06:55:21.663446696 +0000 UTC m=+365.026979211 E0602 06:55:21.687562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 06:55:21.687601 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-02 06:55:21.687593112 +0000 UTC m=+365.051125607 E0602 06:55:21.687646 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 06:55:21.690886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:55:21.691059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:55:21.691589 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 06:55:21.691573013 +0000 UTC m=+365.055105588 E0602 06:55:21.716287 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0602 06:55:21.716671 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 06:55:21.716867 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 06:55:21.717089 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0602 06:55:21.838165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:55:21.838357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hw5cm" condition "Approved" to 2026-06-02 06:55:21.838346293 +0000 UTC m=+365.201878798 I0602 06:55:21.891556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hw5cm" condition "Ready" to 2026-06-02 06:55:21.891541782 +0000 UTC m=+365.255074297 I0602 06:55:21.975190 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:55:21.975172682 +0000 UTC m=+365.338705167 I0602 06:55:22.063295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:55:22.063613 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:55:22.063604035 +0000 UTC m=+365.427136550 I0602 06:55:22.105875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:55:26.716767 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:55:26.716756556 +0000 UTC m=+370.080289061 I0602 06:56:09.886521 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-02 06:56:09.886478875 +0000 UTC m=+413.250011360 I0602 06:56:09.886559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:09.886621 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 06:56:09.886615762 +0000 UTC m=+413.250148247 I0602 06:56:09.886773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:09.886805 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 06:56:09.88679819 +0000 UTC m=+413.250330675 I0602 06:56:09.886811 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 06:56:09.886807541 +0000 UTC m=+413.250340016 I0602 06:56:09.887002 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-02 06:56:09.88699697 +0000 UTC m=+413.250529475 I0602 06:56:09.887024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:09.887052 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 06:56:09.887046033 +0000 UTC m=+413.250578518 I0602 06:56:09.929117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:09.930351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:09.930417 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 06:56:09.930409202 +0000 UTC m=+413.293941697 I0602 06:56:09.941251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:09.941602 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 06:56:09.941590756 +0000 UTC m=+413.305123251 I0602 06:56:09.944621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:09.946155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:09.946237 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 06:56:09.946218816 +0000 UTC m=+413.309751311 I0602 06:56:10.058438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:10.138226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wl5vb" condition "Approved" to 2026-06-02 06:56:10.138216986 +0000 UTC m=+413.501749471 I0602 06:56:10.159103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9w55m" condition "Approved" to 2026-06-02 06:56:10.159092485 +0000 UTC m=+413.522624970 I0602 06:56:10.189675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9w55m" condition "Ready" to 2026-06-02 06:56:10.189666958 +0000 UTC m=+413.553199433 I0602 06:56:10.190390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wl5vb" condition "Ready" to 2026-06-02 06:56:10.190375792 +0000 UTC m=+413.553908277 I0602 06:56:10.255053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:10.255087 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 06:56:10.255081208 +0000 UTC m=+413.618613683 I0602 06:56:10.263758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:10.263819 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 06:56:10.263812766 +0000 UTC m=+413.627345261 I0602 06:56:10.293017 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:10.293000852 +0000 UTC m=+413.656533347 I0602 06:56:10.293507 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:10.293490145 +0000 UTC m=+413.657022630 I0602 06:56:10.298339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:10.303686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:10.417881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d7gn9" condition "Approved" to 2026-06-02 06:56:10.417865737 +0000 UTC m=+413.781398232 I0602 06:56:10.564805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bm4gf" condition "Approved" to 2026-06-02 06:56:10.564794038 +0000 UTC m=+413.928326523 I0602 06:56:10.882387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d7gn9" condition "Ready" to 2026-06-02 06:56:10.882377284 +0000 UTC m=+414.245909769 I0602 06:56:11.166426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bm4gf" condition "Ready" to 2026-06-02 06:56:11.166413686 +0000 UTC m=+414.529946181 E0602 06:56:11.253598 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-58qzr\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0602 06:56:11.858934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vs4bf" condition "Approved" to 2026-06-02 06:56:11.858915208 +0000 UTC m=+415.222447723 I0602 06:56:12.169804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vs4bf" condition "Ready" to 2026-06-02 06:56:12.169792543 +0000 UTC m=+415.533325038 I0602 06:56:12.608175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:12.957372 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:12.957359342 +0000 UTC m=+416.320891837 I0602 06:56:13.204720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:13.205223 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:13.205179306 +0000 UTC m=+416.568711801 I0602 06:56:13.553795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:17.971913 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Ready" to 2026-06-02 06:56:17.971887483 +0000 UTC m=+421.335419978 I0602 06:56:17.972349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-728mm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:17.972379 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Issuing" to 2026-06-02 06:56:17.972373616 +0000 UTC m=+421.335906111 I0602 06:56:17.990025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-728mm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-728mm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:17.990120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-728mm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:17.990141 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Issuing" to 2026-06-02 06:56:17.990133371 +0000 UTC m=+421.353665886 I0602 06:56:18.135273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-728mm-bmn9r" condition "Approved" to 2026-06-02 06:56:18.135259064 +0000 UTC m=+421.498791559 I0602 06:56:18.157825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-728mm-bmn9r" condition "Ready" to 2026-06-02 06:56:18.157815105 +0000 UTC m=+421.521347600 I0602 06:56:18.197854 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:18.197835719 +0000 UTC m=+421.561368224 I0602 06:56:18.221526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-728mm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-728mm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:18.221875 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:18.221869512 +0000 UTC m=+421.585401987 I0602 06:56:18.240011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-728mm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-728mm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:18.240348 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-728mm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:18.240339073 +0000 UTC m=+421.603871588 I0602 06:56:32.661045 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-02 06:56:32.661018716 +0000 UTC m=+436.024551241 I0602 06:56:32.661731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:32.661803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 06:56:32.661797155 +0000 UTC m=+436.025329650 I0602 06:56:32.686590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:32.686735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 06:56:32.686882 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 06:56:32.686871588 +0000 UTC m=+436.050404093 I0602 06:56:32.934884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h68rb" condition "Approved" to 2026-06-02 06:56:32.934858448 +0000 UTC m=+436.298390953 I0602 06:56:32.964231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h68rb" condition "Ready" to 2026-06-02 06:56:32.964220528 +0000 UTC m=+436.327753013 I0602 06:56:33.007963 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:33.00793482 +0000 UTC m=+436.371467305 I0602 06:56:33.036474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 06:56:33.036948 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 06:56:33.036936094 +0000 UTC m=+436.400468599 I0602 06:56:33.070716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"