I1002 02:44:02.730106 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="canary" git_commit="" go_version="go1.26.7 (Red Hat 1.26.7-1.el9_8) X:strictfipsruntime" platform="linux/amd64" I1002 02:44:02.730185 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"] I1002 02:44:02.730455 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1002 02:44:02.730467 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I1002 02:44:02.730470 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1002 02:44:02.730473 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1002 02:44:02.730476 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I1002 02:44:02.730478 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1002 02:44:02.732212 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I1002 02:44:02.732247 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1002 02:44:02.732257 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1002 02:44:02.732262 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1002 02:44:02.732711 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1002 02:44:02.732739 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I1002 02:44:02.732751 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1002 02:44:02.734284 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" E1002 02:44:02.748017 1 leaderelection.go:452] "Error retrieving lease lock" err="leases.coordination.k8s.io \"cert-manager-controller\" is forbidden: User \"system:serviceaccount:cert-manager:cert-manager\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-system\"" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1002 02:44:32.971867 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1002 02:44:32.974865 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1002 02:44:32.976168 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1002 02:44:32.976278 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1002 02:44:32.977831 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I1002 02:44:32.979243 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1002 02:44:32.980567 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1002 02:44:32.980693 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1002 02:44:32.983229 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I1002 02:44:32.983341 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1002 02:44:32.984525 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1002 02:44:32.985755 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1002 02:44:32.986913 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1002 02:44:32.986923 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I1002 02:44:32.987008 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1002 02:44:32.988243 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1002 02:44:32.989438 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1002 02:44:32.990600 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1002 02:44:32.990612 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1002 02:44:32.990726 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I1002 02:44:32.993057 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1002 02:44:32.994736 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I1002 02:44:32.995964 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1002 02:44:32.997176 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1002 02:44:32.998366 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1002 02:44:32.999708 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1002 02:44:33.007308 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.007308 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.007859 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.008018 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.008066 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.008460 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.008551 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.008879 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.009174 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.030242 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.059820 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1002 02:44:33.090172 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.090203 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.090219 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.090234 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.090228563 +0000 UTC m=+30.376513878" I1002 02:44:33.090244 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.090239484 +0000 UTC m=+30.376524792" I1002 02:44:33.090201 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.090195683 +0000 UTC m=+30.376480971" I1002 02:44:33.093101 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/serving-cert" resource_name="serving-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="konflux-kite-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" E1002 02:44:33.093225 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1002 02:44:33.093229 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.093221198 +0000 UTC m=+30.379506501" I1002 02:44:33.093268 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.093263583 +0000 UTC m=+30.379548872" E1002 02:44:33.093284 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1002 02:44:33.093647 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/postgresql-cert" resource_name="postgresql-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="postgresql-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" I1002 02:44:33.094907 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="konflux-kite/selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.094900465 +0000 UTC m=+30.381185757" I1002 02:44:33.094924 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.094916608 +0000 UTC m=+30.381201920" I1002 02:44:33.097552 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.097545437 +0000 UTC m=+30.383830743" I1002 02:44:33.097588 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.097580802 +0000 UTC m=+30.383866114" I1002 02:44:33.097594 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.097588852 +0000 UTC m=+30.383874159" I1002 02:44:33.110079 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.110070474 +0000 UTC m=+30.396355771" I1002 02:44:33.110199 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.110193614 +0000 UTC m=+30.396478916" I1002 02:44:33.131201 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="konflux-kite/postgresql-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.131213 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="konflux-kite/serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.131222 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.131217755 +0000 UTC m=+30.417503048" I1002 02:44:33.131228 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.13122402 +0000 UTC m=+30.417509315" E1002 02:44:33.197348 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" E1002 02:44:33.197406 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1002 02:44:33.197436 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1002 02:44:33.197453 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" I1002 02:44:33.198929 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.198962 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.198957907 +0000 UTC m=+30.485243209" I1002 02:44:33.206090 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.206157 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.206195 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.206190678 +0000 UTC m=+30.492475983" I1002 02:44:33.206157 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.206307 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:44:33.206333 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-10-02 02:44:33.206329362 +0000 UTC m=+30.492614650" I1002 02:44:33.206892 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"postgresql-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.273392 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.282421 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.302389 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:33.321493 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Approved" lastTransitionTime="2026-10-02 02:44:33.321473585 +0000 UTC m=+30.607758876" I1002 02:44:33.331111 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-02 02:44:33.331090833 +0000 UTC m=+30.617376131" I1002 02:44:33.358692 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.358685185 +0000 UTC m=+30.644970473" I1002 02:44:33.488974 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Approved" lastTransitionTime="2026-10-02 02:44:33.488944377 +0000 UTC m=+30.775229703" I1002 02:44:33.751530 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.751494176 +0000 UTC m=+31.037779464" I1002 02:44:33.981958 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" lastTransitionTime="2026-10-02 02:44:33.981938901 +0000 UTC m=+31.268224190" I1002 02:44:34.317699 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:34.317686967 +0000 UTC m=+31.603972255" I1002 02:44:34.317803 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:34.317794175 +0000 UTC m=+31.604079470" I1002 02:44:34.622463 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:34.622450111 +0000 UTC m=+31.908735400" I1002 02:44:34.777183 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:34.777169373 +0000 UTC m=+32.063454665" I1002 02:44:34.867148 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:34.867384 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:34.867377878 +0000 UTC m=+32.153663166" I1002 02:44:35.016278 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:35.016870 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:35.016864032 +0000 UTC m=+32.303149321" I1002 02:44:35.616775 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:35.667484 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:35.723090 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:44:35.723077118 +0000 UTC m=+33.009362411" I1002 02:44:35.766711 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:35.816621 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:35.965921 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:44:36.315827 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.317845 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="openshift-kueue-operator/selfsigned" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.317831688 +0000 UTC m=+149.604116988" I1002 02:46:32.342496 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.342484439 +0000 UTC m=+149.628769743" I1002 02:46:32.342531 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:32.342547 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:46:32.342542347 +0000 UTC m=+149.628827643" I1002 02:46:32.366209 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.366246 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.366241524 +0000 UTC m=+149.652526827" I1002 02:46:32.367065 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:32.367081 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-02 02:46:32.367077932 +0000 UTC m=+149.653363220" I1002 02:46:32.367089 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.367081861 +0000 UTC m=+149.653367160" I1002 02:46:32.389619 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:32.389626 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.389618868 +0000 UTC m=+149.675904236" I1002 02:46:32.389641 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:46:32.389635563 +0000 UTC m=+149.675920854" I1002 02:46:32.390663 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.390694 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:32.390707 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-02 02:46:32.39070371 +0000 UTC m=+149.676989047" I1002 02:46:32.410318 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.410349 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:32.410359 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:46:32.410355516 +0000 UTC m=+149.696640804" I1002 02:46:32.543069 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.554969 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:32.554959908 +0000 UTC m=+149.841245583" I1002 02:46:32.563005 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:32.562989969 +0000 UTC m=+149.849275268" I1002 02:46:32.582257 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.582232645 +0000 UTC m=+149.868517933" I1002 02:46:32.582291 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.582283494 +0000 UTC m=+149.868568782" I1002 02:46:32.586001 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:32.585994898 +0000 UTC m=+149.872280196" I1002 02:46:32.610609 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:32.610602932 +0000 UTC m=+149.896888220" I1002 02:46:32.623577 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:32.623569421 +0000 UTC m=+149.909854730" I1002 02:46:32.630878 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:32.630873073 +0000 UTC m=+149.917158369" I1002 02:46:32.824728 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.825314 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:32.825306954 +0000 UTC m=+150.111592247" I1002 02:46:32.923928 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:32.924559 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:32.924552391 +0000 UTC m=+150.210837684" I1002 02:46:32.980007 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:32.979997534 +0000 UTC m=+150.266282823" I1002 02:46:33.374157 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:33.374736 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:33.374730233 +0000 UTC m=+150.661015522" I1002 02:46:33.474847 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:33.574863 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:33.873582 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:37.972015 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:37.972034 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-10-02 02:46:37.972020831 +0000 UTC m=+155.258306131" I1002 02:46:37.972040 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-02 02:46:37.972035781 +0000 UTC m=+155.258321069" I1002 02:46:37.995407 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:37.995440 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:37.995453 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-02 02:46:37.995449789 +0000 UTC m=+155.281735077" I1002 02:46:38.107275 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="tekton-kueue/tekton-kueue-selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.107266132 +0000 UTC m=+155.393551437" I1002 02:46:38.214669 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:38.214695 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-02 02:46:38.214690145 +0000 UTC m=+155.500975458" I1002 02:46:38.214669 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.214654434 +0000 UTC m=+155.500939762" I1002 02:46:38.224300 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.224408 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:38.224437 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:46:38.224431347 +0000 UTC m=+155.510716638" I1002 02:46:38.224450 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.224444144 +0000 UTC m=+155.510729458" I1002 02:46:38.243093 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.243127 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.243123175 +0000 UTC m=+155.529408479" I1002 02:46:38.255225 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.255282 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1002 02:46:38.255300 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-02 02:46:38.255294915 +0000 UTC m=+155.541580212" I1002 02:46:38.261324 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:38.26129444 +0000 UTC m=+155.547579746" I1002 02:46:38.291414 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.291406265 +0000 UTC m=+155.577691553" I1002 02:46:38.313130 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.341687 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:38.341679486 +0000 UTC m=+155.627964774" I1002 02:46:38.379118 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.379668 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:38.379663012 +0000 UTC m=+155.665948300" I1002 02:46:38.387591 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:38.387581246 +0000 UTC m=+155.673866554" I1002 02:46:38.392443 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.421178 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:38.432198 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.432190387 +0000 UTC m=+155.718475682" I1002 02:46:38.447523 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Approved" lastTransitionTime="2026-10-02 02:46:38.447479193 +0000 UTC m=+155.733764494" I1002 02:46:38.767301 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Ready" lastTransitionTime="2026-10-02 02:46:38.767288152 +0000 UTC m=+156.053573445" I1002 02:46:38.797711 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:38.797702371 +0000 UTC m=+156.083987660" I1002 02:46:39.033191 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:39.139566 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:39.139554854 +0000 UTC m=+156.425840156" I1002 02:46:39.333483 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:39.334117 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-02 02:46:39.334111941 +0000 UTC m=+156.620397234" I1002 02:46:39.727653 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:46:39.778342 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"