I0408 10:42:54.456077 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 10:42:54.456274 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 10:42:54.456699 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 10:42:54.461390 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 10:42:54.461921 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 10:42:54.462102 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 10:42:54.462107 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 10:42:54.465005 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 10:42:54.483595 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 10:42:54.488955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 10:42:54.490596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 10:42:54.490836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 10:42:54.493243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 10:42:54.495140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 10:42:54.501519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 10:42:54.509029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 10:42:54.512106 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 10:42:54.512179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 10:42:54.515223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 10:42:54.518839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 10:42:54.521199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 10:42:54.523811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 10:42:54.525614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 10:42:54.525637 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 10:42:54.526694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 10:42:54.528206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 10:42:54.531554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 10:42:54.539637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 10:42:54.542097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 10:42:54.543874 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 10:42:54.543931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 10:42:54.543986 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 10:42:54.545933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 10:42:54.548245 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.548522 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.548708 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.549630 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.549640 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.549876 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.549897 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.550189 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.550680 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:42:54.632215 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:43:05.849045 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 10:43:05.849030388 +0000 UTC m=+11.426076665 I0408 10:43:06.647185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:43:06.647227 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:43:06.647218831 +0000 UTC m=+12.224265118 I0408 10:43:06.647516 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:43:06.647498068 +0000 UTC m=+12.224544385 E0408 10:43:06.662348 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:43:06.662538 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 10:43:06.662526036 +0000 UTC m=+12.239572353 E0408 10:43:06.662630 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:43:06.667022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:06.667528 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:43:06.667521154 +0000 UTC m=+12.244567441 E0408 10:43:06.676563 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 10:43:06.678950 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:43:06.679006 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:43:06.679051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 10:43:06.690598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9p627" condition "Approved" to 2026-04-08 10:43:06.690585595 +0000 UTC m=+12.267631892 I0408 10:43:06.690765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:06.691246 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:43:06.691241713 +0000 UTC m=+12.268287990 I0408 10:43:06.708822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9p627" condition "Ready" to 2026-04-08 10:43:06.708804561 +0000 UTC m=+12.285850838 I0408 10:43:06.745924 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:43:06.745387468 +0000 UTC m=+12.322433755 I0408 10:43:06.764011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:06.764439 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:43:06.764430776 +0000 UTC m=+12.341477063 I0408 10:43:06.775060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:06.786339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:11.677247 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:43:11.677232522 +0000 UTC m=+17.254278799 I0408 10:43:33.593855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:43:33.593936 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:43:33.593897391 +0000 UTC m=+39.170943708 I0408 10:43:33.594502 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:43:33.594490444 +0000 UTC m=+39.171536761 I0408 10:43:33.608564 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 10:43:33.608554669 +0000 UTC m=+39.185600956 I0408 10:43:33.618833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:43:33.619845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:43:33.619871 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:43:33.619865566 +0000 UTC m=+39.196911833 I0408 10:43:33.760854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rsn9p" condition "Approved" to 2026-04-08 10:43:33.760832889 +0000 UTC m=+39.337879176 I0408 10:43:33.796326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rsn9p" condition "Ready" to 2026-04-08 10:43:33.796315414 +0000 UTC m=+39.373361691 I0408 10:43:33.826048 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:43:33.826029898 +0000 UTC m=+39.403076215 I0408 10:43:33.856983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:47:48.981442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Ready" to 2026-04-08 10:47:48.980627524 +0000 UTC m=+294.557673811 I0408 10:47:48.982169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:47:48.982190 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Issuing" to 2026-04-08 10:47:48.982185717 +0000 UTC m=+294.559232004 I0408 10:47:48.999507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:47:48.999567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:47:48.999582 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Issuing" to 2026-04-08 10:47:48.999574915 +0000 UTC m=+294.576621202 I0408 10:47:49.191628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-85.nip.io-tls-6vcjc" condition "Approved" to 2026-04-08 10:47:49.191613949 +0000 UTC m=+294.768660236 I0408 10:47:49.222161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-85.nip.io-tls-6vcjc" condition "Ready" to 2026-04-08 10:47:49.222138123 +0000 UTC m=+294.799184430 I0408 10:47:49.252272 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:47:49.252254988 +0000 UTC m=+294.829301275 I0408 10:47:49.277404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:47:49.328181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:48:54.212409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:48:54.212372681 +0000 UTC m=+359.789418958 I0408 10:48:54.212468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:48:54.212487 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:48:54.212482673 +0000 UTC m=+359.789528950 I0408 10:48:54.230016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:48:54.230107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:48:54.230136 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:48:54.23012739 +0000 UTC m=+359.807173687 E0408 10:48:54.236771 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:48:54.236808 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 10:48:54.236801739 +0000 UTC m=+359.813848026 E0408 10:48:54.237001 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:48:54.248053 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 10:48:54.248362 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:48:54.248478 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:48:54.248676 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 10:48:54.298138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kjlbs" condition "Approved" to 2026-04-08 10:48:54.298122475 +0000 UTC m=+359.875168762 I0408 10:48:54.312189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kjlbs" condition "Ready" to 2026-04-08 10:48:54.312171697 +0000 UTC m=+359.889217984 I0408 10:48:54.348107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:48:54.348088194 +0000 UTC m=+359.925134511 I0408 10:48:54.366726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:48:54.367118 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:48:54.36710864 +0000 UTC m=+359.944154927 I0408 10:48:54.400220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:48:54.440864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:48:59.248910 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:48:59.248889195 +0000 UTC m=+364.825935502 I0408 10:49:39.791000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:39.791199 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:49:39.791042017 +0000 UTC m=+405.368088294 I0408 10:49:39.791403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:49:39.79067845 +0000 UTC m=+405.367724717 I0408 10:49:39.800047 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:49:39.800035358 +0000 UTC m=+405.377081645 I0408 10:49:39.800084 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:49:39.800075579 +0000 UTC m=+405.377121876 I0408 10:49:39.800273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:39.800296 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:49:39.800292542 +0000 UTC m=+405.377338819 I0408 10:49:39.800486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:39.800504 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:49:39.800500516 +0000 UTC m=+405.377546793 I0408 10:49:39.829098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:39.829209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:39.829284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:39.829343 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:49:39.829336792 +0000 UTC m=+405.406383069 I0408 10:49:39.831422 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:49:39.831412639 +0000 UTC m=+405.408458916 I0408 10:49:39.833401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:39.833469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:39.833507 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:49:39.833500276 +0000 UTC m=+405.410546583 I0408 10:49:40.000025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:40.039273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:40.040163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2x9vc" condition "Approved" to 2026-04-08 10:49:40.040156348 +0000 UTC m=+405.617202625 I0408 10:49:40.045086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tdjsl" condition "Approved" to 2026-04-08 10:49:40.045079886 +0000 UTC m=+405.622126163 I0408 10:49:40.083994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tdjsl" condition "Ready" to 2026-04-08 10:49:40.083983109 +0000 UTC m=+405.661029396 I0408 10:49:40.084268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2x9vc" condition "Ready" to 2026-04-08 10:49:40.084246524 +0000 UTC m=+405.661292831 I0408 10:49:40.089381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:40.123493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r6hfg" condition "Approved" to 2026-04-08 10:49:40.123483593 +0000 UTC m=+405.700529870 I0408 10:49:40.210032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r6hfg" condition "Ready" to 2026-04-08 10:49:40.210016095 +0000 UTC m=+405.787062382 I0408 10:49:40.391173 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:40.391150403 +0000 UTC m=+405.968196710 I0408 10:49:40.440910 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:40.44090221 +0000 UTC m=+406.017948487 I0408 10:49:40.691723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:40.692529 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:40.692517653 +0000 UTC m=+406.269563960 I0408 10:49:40.796759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:40.797050 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:40.797042676 +0000 UTC m=+406.374088963 I0408 10:49:40.842392 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:40.842381724 +0000 UTC m=+406.419428011 I0408 10:49:41.002575 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:41.002563439 +0000 UTC m=+406.579609726 I0408 10:49:41.190838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:41.191222 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:41.191213461 +0000 UTC m=+406.768259748 I0408 10:49:41.240958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:41.343221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:41.390298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:41.692185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:48.579062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:48.579095 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" condition "Issuing" to 2026-04-08 10:49:48.579088617 +0000 UTC m=+414.156134904 I0408 10:49:48.579233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" condition "Ready" to 2026-04-08 10:49:48.579217799 +0000 UTC m=+414.156264086 I0408 10:49:48.596440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:48.596552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:48.596577 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" condition "Issuing" to 2026-04-08 10:49:48.596570551 +0000 UTC m=+414.173616838 I0408 10:49:48.755487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:48.772391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l2pwh-p2rp2" condition "Approved" to 2026-04-08 10:49:48.77237874 +0000 UTC m=+414.349425027 I0408 10:49:48.789853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l2pwh-p2rp2" condition "Ready" to 2026-04-08 10:49:48.789842175 +0000 UTC m=+414.366888462 I0408 10:49:48.815398 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:48.815375719 +0000 UTC m=+414.392422006 I0408 10:49:48.840658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l2pwh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:50:01.238839 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:50:01.238807816 +0000 UTC m=+426.815854093 I0408 10:50:01.238869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:50:01.238884 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:50:01.238880647 +0000 UTC m=+426.815926924 I0408 10:50:01.260838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:50:01.260926 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:50:01.260917987 +0000 UTC m=+426.837964274 I0408 10:50:01.582873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:50:01.650678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5r8ws" condition "Approved" to 2026-04-08 10:50:01.650661276 +0000 UTC m=+427.227707573 I0408 10:50:01.666739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5r8ws" condition "Ready" to 2026-04-08 10:50:01.666728986 +0000 UTC m=+427.243775273 I0408 10:50:01.702536 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:50:01.702525346 +0000 UTC m=+427.279571633 I0408 10:50:01.730400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:50:01.730707 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:50:01.730702108 +0000 UTC m=+427.307748385 I0408 10:50:01.761700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:50:01.762010 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:50:01.762001974 +0000 UTC m=+427.339048251