I0411 02:07:50.770559 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 02:07:50.770724 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 02:07:50.771062 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 02:07:50.775668 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 02:07:50.776316 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 02:07:50.776415 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 02:07:50.776421 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 02:07:50.779727 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 02:07:50.800279 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 02:07:50.811000 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 02:07:50.816799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 02:07:50.820788 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 02:07:50.820915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 02:07:50.823786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 02:07:50.825484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 02:07:50.830080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 02:07:50.832917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 02:07:50.838968 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 02:07:50.839029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 02:07:50.841692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 02:07:50.843556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 02:07:50.845404 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 02:07:50.845427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 02:07:50.847516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 02:07:50.849364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 02:07:50.851583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 02:07:50.854057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 02:07:50.858419 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 02:07:50.858458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 02:07:50.858470 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 02:07:50.858691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 02:07:50.861426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 02:07:50.864450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 02:07:50.867341 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.868166 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.868246 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.869764 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.896380 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.910433 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.917780 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.934918 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.959788 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:07:50.968519 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:08:02.613869 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 02:08:02.613845332 +0000 UTC m=+11.893946378 I0411 02:08:03.450837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:08:03.450855 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 02:08:03.45083235 +0000 UTC m=+12.730933406 I0411 02:08:03.451337 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 02:08:03.450972922 +0000 UTC m=+12.731073948 I0411 02:08:03.467616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:08:03.467988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:08:03.468031 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 02:08:03.468019254 +0000 UTC m=+12.748120310 E0411 02:08:03.470541 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:08:03.470739 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 02:08:03.470726446 +0000 UTC m=+12.750827492 E0411 02:08:03.470913 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:08:03.486374 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 02:08:03.486713 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:08:03.486873 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:08:03.486945 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 02:08:03.508353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dbcdf" condition "Approved" to 2026-04-11 02:08:03.508335006 +0000 UTC m=+12.788436042 I0411 02:08:03.527506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dbcdf" condition "Ready" to 2026-04-11 02:08:03.527483892 +0000 UTC m=+12.807584948 I0411 02:08:03.552302 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:08:03.552287483 +0000 UTC m=+12.832388509 I0411 02:08:03.569787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:08:03.570316 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:08:03.570301721 +0000 UTC m=+12.850402777 I0411 02:08:03.587359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:08:03.587694 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:08:03.587683069 +0000 UTC m=+12.867784095 I0411 02:08:08.488098 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:08:08.488074508 +0000 UTC m=+17.768175554 I0411 02:08:32.091807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:08:32.092093 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 02:08:32.092073706 +0000 UTC m=+41.372174732 I0411 02:08:32.091852 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 02:08:32.091837843 +0000 UTC m=+41.371938849 I0411 02:08:32.107277 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 02:08:32.10724555 +0000 UTC m=+41.387346566 I0411 02:08:32.138884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:08:32.139000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 02:08:32.138990944 +0000 UTC m=+41.419091970 I0411 02:08:32.580007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:08:32.619360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w97lt" condition "Approved" to 2026-04-11 02:08:32.619348546 +0000 UTC m=+41.899449572 I0411 02:08:32.659681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w97lt" condition "Ready" to 2026-04-11 02:08:32.659633075 +0000 UTC m=+41.939734091 I0411 02:08:32.695868 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:08:32.6958504 +0000 UTC m=+41.975951416 I0411 02:08:32.721906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.144348 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-11 02:13:06.144327103 +0000 UTC m=+315.424428129 I0411 02:13:06.144809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:13:06.144881 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-11 02:13:06.144873443 +0000 UTC m=+315.424974469 I0411 02:13:06.167951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.168076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-11 02:13:06.168065439 +0000 UTC m=+315.448166455 I0411 02:13:06.400518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.433990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-lk79c" condition "Approved" to 2026-04-11 02:13:06.433973581 +0000 UTC m=+315.714074637 I0411 02:13:06.470783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-lk79c" condition "Ready" to 2026-04-11 02:13:06.470765175 +0000 UTC m=+315.750866221 I0411 02:13:06.503134 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:13:06.503123813 +0000 UTC m=+315.783224839 I0411 02:13:06.526747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.527272 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:13:06.527253966 +0000 UTC m=+315.807354992 I0411 02:13:06.538048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.548901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:13:06.549231 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:13:06.549221351 +0000 UTC m=+315.829322377 I0411 02:13:06.551206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:17.695116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:14:17.695172 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 02:14:17.695159096 +0000 UTC m=+386.975260152 I0411 02:14:17.695282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 02:14:17.695252198 +0000 UTC m=+386.975353254 E0411 02:14:17.760617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:14:17.760745 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 02:14:17.760732615 +0000 UTC m=+387.040833661 E0411 02:14:17.760816 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:14:17.763725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:17.764375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:14:17.764464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 02:14:17.764444921 +0000 UTC m=+387.044545977 E0411 02:14:17.850785 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 02:14:17.851860 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:14:17.851987 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:14:17.852356 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 02:14:18.053226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7skdr" condition "Approved" to 2026-04-11 02:14:18.053207276 +0000 UTC m=+387.333308332 I0411 02:14:18.150752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7skdr" condition "Ready" to 2026-04-11 02:14:18.150738179 +0000 UTC m=+387.430839205 I0411 02:14:18.302379 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:18.302358493 +0000 UTC m=+387.582459519 I0411 02:14:18.359560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:18.360013 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:18.360000119 +0000 UTC m=+387.640101155 I0411 02:14:18.471792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:18.475865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:22.852148 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:22.852132785 +0000 UTC m=+392.132233831 I0411 02:15:06.894263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:06.894313 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 02:15:06.894305879 +0000 UTC m=+436.174406895 I0411 02:15:06.896013 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 02:15:06.895996793 +0000 UTC m=+436.176097809 I0411 02:15:06.903451 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 02:15:06.903438469 +0000 UTC m=+436.183539495 I0411 02:15:06.903712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:06.903732 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 02:15:06.903729393 +0000 UTC m=+436.183830409 I0411 02:15:06.913682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:06.913768 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 02:15:06.913756736 +0000 UTC m=+436.193857752 I0411 02:15:06.915580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 02:15:06.915563821 +0000 UTC m=+436.195664847 I0411 02:15:06.936330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:06.936389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:06.936409 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 02:15:06.936403698 +0000 UTC m=+436.216504704 I0411 02:15:06.960043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:06.960316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:06.960442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:06.960512 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 02:15:06.960502761 +0000 UTC m=+436.240603777 I0411 02:15:06.960854 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 02:15:06.960848397 +0000 UTC m=+436.240949413 I0411 02:15:07.109915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:07.123362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2bfg" condition "Approved" to 2026-04-11 02:15:07.123346908 +0000 UTC m=+436.403447934 I0411 02:15:07.142731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2bfg" condition "Ready" to 2026-04-11 02:15:07.142716063 +0000 UTC m=+436.422817089 I0411 02:15:07.214349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:07.214403 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 02:15:07.214389692 +0000 UTC m=+436.494490718 I0411 02:15:07.220790 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:07.220773193 +0000 UTC m=+436.500874219 I0411 02:15:07.259744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zh99n" condition "Approved" to 2026-04-11 02:15:07.259732017 +0000 UTC m=+436.539833033 I0411 02:15:07.265233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:07.265602 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:07.26557996 +0000 UTC m=+436.545680976 I0411 02:15:07.277472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:07.286601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zh99n" condition "Ready" to 2026-04-11 02:15:07.286593709 +0000 UTC m=+436.566694725 I0411 02:15:07.291264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4p4tx" condition "Approved" to 2026-04-11 02:15:07.291251965 +0000 UTC m=+436.571352981 I0411 02:15:07.292311 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:07.29230506 +0000 UTC m=+436.572406076 I0411 02:15:07.457120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4p4tx" condition "Ready" to 2026-04-11 02:15:07.457105504 +0000 UTC m=+436.737206530 I0411 02:15:07.686234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:07.778838 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:07.778825809 +0000 UTC m=+437.058926835 E0411 02:15:07.828530 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-vgcvc\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0411 02:15:08.135610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:08.240242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:08.689597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rvbzb" condition "Approved" to 2026-04-11 02:15:08.689573678 +0000 UTC m=+437.969674724 I0411 02:15:08.829729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:09.325452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rvbzb" condition "Ready" to 2026-04-11 02:15:09.325436354 +0000 UTC m=+438.605537370 I0411 02:15:09.483819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:09.532799 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:09.532775126 +0000 UTC m=+438.812876172 I0411 02:15:09.636422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:14.905037 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" condition "Ready" to 2026-04-11 02:15:14.90499417 +0000 UTC m=+444.185095226 I0411 02:15:14.905163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:14.908756 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" condition "Issuing" to 2026-04-11 02:15:14.908736873 +0000 UTC m=+444.188837979 I0411 02:15:14.925296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:14.925396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:14.925492 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" condition "Issuing" to 2026-04-11 02:15:14.9254831 +0000 UTC m=+444.205584126 I0411 02:15:15.253255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fqlzv-2tb2x" condition "Approved" to 2026-04-11 02:15:15.25323226 +0000 UTC m=+444.533333286 I0411 02:15:15.280536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fqlzv-2tb2x" condition "Ready" to 2026-04-11 02:15:15.280517224 +0000 UTC m=+444.560618230 I0411 02:15:15.314537 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:15.314513854 +0000 UTC m=+444.594614880 I0411 02:15:15.336464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:15.336726 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:15.336720796 +0000 UTC m=+444.616821812 I0411 02:15:15.363058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqlzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:29.753224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:29.753263 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 02:15:29.753254454 +0000 UTC m=+459.033355480 I0411 02:15:29.753827 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 02:15:29.753821642 +0000 UTC m=+459.033922668 I0411 02:15:29.769600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:29.769658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:15:29.769672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 02:15:29.769666712 +0000 UTC m=+459.049767738 I0411 02:15:29.976852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:29.997370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dfwt2" condition "Approved" to 2026-04-11 02:15:29.997357574 +0000 UTC m=+459.277458600 I0411 02:15:30.042583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dfwt2" condition "Ready" to 2026-04-11 02:15:30.042568011 +0000 UTC m=+459.322669037 I0411 02:15:30.082765 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:30.082750108 +0000 UTC m=+459.362851114 I0411 02:15:30.116348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:15:30.116743 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:15:30.116734701 +0000 UTC m=+459.396835717 I0411 02:15:30.170605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"