I0409 02:01:05.817165 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 02:01:05.817462 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 02:01:05.817632 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 02:01:05.820836 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 02:01:05.821348 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 02:01:05.821432 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 02:01:05.821537 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 02:01:05.824156 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 02:01:05.843146 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 02:01:05.850036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 02:01:05.853575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 02:01:05.856122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 02:01:05.858612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 02:01:05.861078 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 02:01:05.861157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 02:01:05.868835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 02:01:05.872466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 02:01:05.874422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 02:01:05.876264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 02:01:05.878099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 02:01:05.880173 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 02:01:05.880261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 02:01:05.882439 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 02:01:05.882478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 02:01:05.884424 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 02:01:05.890890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 02:01:05.893675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 02:01:05.895846 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 02:01:05.895878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 02:01:05.898332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 02:01:05.900784 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 02:01:05.900809 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 02:01:05.901839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 02:01:05.904144 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.904441 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.904582 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.904889 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.905035 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.905107 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.905707 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.905736 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.906805 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:05.992327 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:01:16.595264 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 02:01:16.595248453 +0000 UTC m=+10.806494188 I0409 02:01:17.309197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:01:17.309295 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:01:17.309284666 +0000 UTC m=+11.520530431 I0409 02:01:17.309574 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:01:17.309553741 +0000 UTC m=+11.520799516 E0409 02:01:17.323422 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:01:17.323507 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 02:01:17.323500239 +0000 UTC m=+11.534745974 E0409 02:01:17.323529 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:01:17.332686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:17.332791 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:01:17.332783218 +0000 UTC m=+11.544028953 E0409 02:01:17.337998 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 02:01:17.338096 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:01:17.338976 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:01:17.339058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 02:01:17.348804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:17.366611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c65p5" condition "Approved" to 2026-04-09 02:01:17.366600996 +0000 UTC m=+11.577846731 I0409 02:01:17.379634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c65p5" condition "Ready" to 2026-04-09 02:01:17.379623663 +0000 UTC m=+11.590869398 I0409 02:01:17.401418 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:17.401404769 +0000 UTC m=+11.612650524 I0409 02:01:17.415440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:17.415867 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:17.415860986 +0000 UTC m=+11.627106721 I0409 02:01:17.431182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:22.338935 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:22.338917751 +0000 UTC m=+16.550163516 I0409 02:01:43.476377 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:01:43.476328304 +0000 UTC m=+37.687574039 I0409 02:01:43.476842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:01:43.476864 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:01:43.476859586 +0000 UTC m=+37.688105321 I0409 02:01:43.493276 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 02:01:43.493265128 +0000 UTC m=+37.704510873 I0409 02:01:43.508506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:43.508578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:01:43.508599 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:01:43.508593375 +0000 UTC m=+37.719839110 I0409 02:01:43.909950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:43.923869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mklcb" condition "Approved" to 2026-04-09 02:01:43.9238582 +0000 UTC m=+38.135103945 I0409 02:01:43.951801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mklcb" condition "Ready" to 2026-04-09 02:01:43.951785638 +0000 UTC m=+38.163031403 I0409 02:01:43.991644 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:43.991629778 +0000 UTC m=+38.202875533 I0409 02:01:44.012046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:44.012439 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:44.012433362 +0000 UTC m=+38.223679087 I0409 02:01:44.033463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:01:44.033796 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:01:44.033788884 +0000 UTC m=+38.245034619 I0409 02:05:51.552899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:05:51.552963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-09 02:05:51.552956311 +0000 UTC m=+285.764202036 I0409 02:05:51.553564 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-09 02:05:51.553559639 +0000 UTC m=+285.764805364 I0409 02:05:51.576296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:05:51.576405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:05:51.576439 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-09 02:05:51.576431044 +0000 UTC m=+285.787676799 I0409 02:05:51.826306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:05:51.837696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-lj5nq" condition "Approved" to 2026-04-09 02:05:51.837686574 +0000 UTC m=+286.048932309 I0409 02:05:51.871142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-lj5nq" condition "Ready" to 2026-04-09 02:05:51.871132706 +0000 UTC m=+286.082378441 I0409 02:05:51.898888 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:51.898878776 +0000 UTC m=+286.110124511 I0409 02:05:51.917140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:05:51.917773 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:51.917762422 +0000 UTC m=+286.129008167 I0409 02:05:51.927794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:05:51.937039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:55.539150 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:06:55.539122508 +0000 UTC m=+349.750368243 I0409 02:06:55.539387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:06:55.539435 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:06:55.539427586 +0000 UTC m=+349.750673351 E0409 02:06:55.551159 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:06:55.551206 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 02:06:55.551197158 +0000 UTC m=+349.762442903 E0409 02:06:55.551256 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:06:55.553482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:55.553551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:06:55.553578 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:06:55.553572647 +0000 UTC m=+349.764818392 E0409 02:06:55.561142 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 02:06:55.561454 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:06:55.561560 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:06:55.561696 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 02:06:55.585290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:55.587497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nwj42" condition "Approved" to 2026-04-09 02:06:55.58748709 +0000 UTC m=+349.798732815 I0409 02:06:55.598513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nwj42" condition "Ready" to 2026-04-09 02:06:55.598503154 +0000 UTC m=+349.809748889 I0409 02:06:55.615102 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:06:55.615093657 +0000 UTC m=+349.826339392 I0409 02:06:55.633827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:55.634539 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:06:55.63452872 +0000 UTC m=+349.845774485 I0409 02:06:55.647799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:55.649146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:00.562743 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:00.562729444 +0000 UTC m=+354.773975199 I0409 02:07:39.359546 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:07:39.359534876 +0000 UTC m=+393.570780591 I0409 02:07:39.363441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.363495 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:07:39.363487985 +0000 UTC m=+393.574733710 I0409 02:07:39.363842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.364052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.364072 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:07:39.364069048 +0000 UTC m=+393.575314773 I0409 02:07:39.364244 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:07:39.364238282 +0000 UTC m=+393.575484017 I0409 02:07:39.364534 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:07:39.364530759 +0000 UTC m=+393.575776484 I0409 02:07:39.363881 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:07:39.363873904 +0000 UTC m=+393.575119629 I0409 02:07:39.401149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.401238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.401268 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:07:39.401262638 +0000 UTC m=+393.612508353 I0409 02:07:39.407425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.407522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.407548 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:07:39.40754304 +0000 UTC m=+393.618788765 I0409 02:07:39.408013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.408062 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:07:39.408057192 +0000 UTC m=+393.619302917 I0409 02:07:39.574176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.583152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4td6r" condition "Approved" to 2026-04-09 02:07:39.583139196 +0000 UTC m=+393.794384911 I0409 02:07:39.609673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4td6r" condition "Ready" to 2026-04-09 02:07:39.609660505 +0000 UTC m=+393.820906270 I0409 02:07:39.662366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.663068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wfvb2" condition "Approved" to 2026-04-09 02:07:39.663056111 +0000 UTC m=+393.874301836 I0409 02:07:39.701582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:39.701613 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:07:39.701607021 +0000 UTC m=+393.912852746 I0409 02:07:39.701787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wfvb2" condition "Ready" to 2026-04-09 02:07:39.701777675 +0000 UTC m=+393.913023400 I0409 02:07:39.704130 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:39.704125128 +0000 UTC m=+393.915370853 I0409 02:07:39.722782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.725371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.725637 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:39.725630174 +0000 UTC m=+393.936875909 I0409 02:07:39.740008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:39.941013 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:39.940997958 +0000 UTC m=+394.152243693 I0409 02:07:40.042571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-znpfs" condition "Approved" to 2026-04-09 02:07:40.04255789 +0000 UTC m=+394.253803625 I0409 02:07:40.141426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0409 02:07:40.184436 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-s6cgh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0409 02:07:40.336723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4nm94" condition "Approved" to 2026-04-09 02:07:40.336714191 +0000 UTC m=+394.547959906 I0409 02:07:40.677214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-znpfs" condition "Ready" to 2026-04-09 02:07:40.677198756 +0000 UTC m=+394.888444511 I0409 02:07:40.743668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4nm94" condition "Ready" to 2026-04-09 02:07:40.743652624 +0000 UTC m=+394.954898389 I0409 02:07:41.389934 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:41.389915465 +0000 UTC m=+395.601161230 I0409 02:07:41.738526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:41.739100 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:41.739086341 +0000 UTC m=+395.950332096 I0409 02:07:41.786544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:41.936777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:42.187994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:47.055445 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" condition "Ready" to 2026-04-09 02:07:47.055411807 +0000 UTC m=+401.266657562 I0409 02:07:47.056116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:47.056139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" condition "Issuing" to 2026-04-09 02:07:47.056132223 +0000 UTC m=+401.267377978 I0409 02:07:47.073292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:47.073398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:47.073464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" condition "Issuing" to 2026-04-09 02:07:47.073456308 +0000 UTC m=+401.284702053 I0409 02:07:47.182590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:47.187786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m5kbn-lstqt" condition "Approved" to 2026-04-09 02:07:47.187767402 +0000 UTC m=+401.399013137 I0409 02:07:47.207707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m5kbn-lstqt" condition "Ready" to 2026-04-09 02:07:47.207695005 +0000 UTC m=+401.418940730 I0409 02:07:47.250064 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:47.250050557 +0000 UTC m=+401.461296292 I0409 02:07:47.271703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:47.272076 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:47.272069007 +0000 UTC m=+401.483314722 I0409 02:07:47.280342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:47.294718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m5kbn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:58.807162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:07:58.80714163 +0000 UTC m=+413.018387345 I0409 02:07:58.807597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:58.807610 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:07:58.80760595 +0000 UTC m=+413.018851675 I0409 02:07:58.827901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:58.828033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:58.828050 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:07:58.828045286 +0000 UTC m=+413.039291011 I0409 02:07:58.973673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jb8bk" condition "Approved" to 2026-04-09 02:07:58.973663244 +0000 UTC m=+413.184908979 I0409 02:07:58.990524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jb8bk" condition "Ready" to 2026-04-09 02:07:58.990514641 +0000 UTC m=+413.201760356 I0409 02:07:59.020542 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:59.020524525 +0000 UTC m=+413.231770280 I0409 02:07:59.038027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:59.038446 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:59.038435506 +0000 UTC m=+413.249681261 I0409 02:07:59.070008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"