I0507 14:53:08.105197 1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="canary" git_commit="" go_version="go1.25.8 (Red Hat 1.25.8-1.el9_6) X:strictfipsruntime" platform="linux/amd64" I0507 14:53:08.105283 1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"] I0507 14:53:08.105489 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0507 14:53:08.105502 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0507 14:53:08.105509 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0507 14:53:08.105512 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0507 14:53:08.105515 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0507 14:53:08.107288 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0507 14:53:08.107300 1 controller.go:438] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0507 14:53:08.107306 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0507 14:53:08.107558 1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0507 14:53:08.107602 1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0507 14:53:08.107606 1 controller.go:182] "starting leader election" logger="cert-manager.controller" I0507 14:53:08.109049 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... E0507 14:53:08.123356 1 leaderelection.go:448] error retrieving resource lock kube-system/cert-manager-controller: leases.coordination.k8s.io "cert-manager-controller" is forbidden: User "system:serviceaccount:cert-manager:cert-manager" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-system" I0507 14:53:33.156947 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0507 14:53:33.158850 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0507 14:53:33.158941 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers" I0507 14:53:33.160445 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0507 14:53:33.161822 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders" I0507 14:53:33.162994 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0507 14:53:33.163005 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0507 14:53:33.163103 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0507 14:53:33.164277 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0507 14:53:33.167211 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0507 14:53:33.168348 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0507 14:53:33.168454 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0507 14:53:33.169698 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0507 14:53:33.171067 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges" I0507 14:53:33.172543 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0507 14:53:33.173984 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0507 14:53:33.175228 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0507 14:53:33.177694 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0507 14:53:33.177794 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0507 14:53:33.179230 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0507 14:53:33.180666 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0507 14:53:33.182022 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0507 14:53:33.183566 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0507 14:53:33.184784 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0507 14:53:33.184821 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0507 14:53:33.190557 1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190570 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190627 1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190645 1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190617 1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190779 1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190873 1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.190864 1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.191012 1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.191026 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:33.205867 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0507 14:53:58.567292 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="openshift-kueue-operator/selfsigned" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.567244398 +0000 UTC m=+50.478005545" I0507 14:53:58.600376 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:53:58.600369 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.600354608 +0000 UTC m=+50.511115756" I0507 14:53:58.600423 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:53:58.600418295 +0000 UTC m=+50.511179434" I0507 14:53:58.643125 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.643180 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.643172166 +0000 UTC m=+50.553933325" I0507 14:53:58.661315 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.661301836 +0000 UTC m=+50.572062990" I0507 14:53:58.661343 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:53:58.661370 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-05-07 14:53:58.661362517 +0000 UTC m=+50.572123677" I0507 14:53:58.701170 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.701157321 +0000 UTC m=+50.611918478" I0507 14:53:58.701209 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:53:58.701247 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:53:58.70123994 +0000 UTC m=+50.612001101" I0507 14:53:58.716327 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.716399 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.716389232 +0000 UTC m=+50.627150395" I0507 14:53:58.742689 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.742738 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:53:58.742753 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:53:58.742747219 +0000 UTC m=+50.653508365" I0507 14:53:58.748825 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.767044 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.862776 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Approved" lastTransitionTime="2026-05-07 14:53:58.862759901 +0000 UTC m=+50.773521048" I0507 14:53:58.866011 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Approved" lastTransitionTime="2026-05-07 14:53:58.86600237 +0000 UTC m=+50.776763523" I0507 14:53:58.899399 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:58.953184 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.953170992 +0000 UTC m=+50.863932127" I0507 14:53:58.955115 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Approved" lastTransitionTime="2026-05-07 14:53:58.955106406 +0000 UTC m=+50.865867564" I0507 14:53:58.960900 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Ready" lastTransitionTime="2026-05-07 14:53:58.960892074 +0000 UTC m=+50.871653209" I0507 14:53:59.007974 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Ready" lastTransitionTime="2026-05-07 14:53:59.007961565 +0000 UTC m=+50.918722700" I0507 14:53:59.017518 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.017504576 +0000 UTC m=+50.928265723" I0507 14:53:59.084482 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.084467057 +0000 UTC m=+50.995228200" I0507 14:53:59.230285 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:59.230743 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.230735844 +0000 UTC m=+51.141496987" I0507 14:53:59.287846 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.287830341 +0000 UTC m=+51.198591476" I0507 14:53:59.381101 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:59.381554 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.381547032 +0000 UTC m=+51.292308179" I0507 14:53:59.625718 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:59.784049 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:53:59.784035911 +0000 UTC m=+51.694797061" I0507 14:53:59.827116 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:53:59.982976 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:00.034614 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:00.079164 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.190197 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:24.190219 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-05-07 14:54:24.190213688 +0000 UTC m=+76.100974828" I0507 14:54:24.190226 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.190213749 +0000 UTC m=+76.100974899" I0507 14:54:24.232028 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.232078 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.23207052 +0000 UTC m=+76.142831672" I0507 14:54:24.290430 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.343769 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:24.343753739 +0000 UTC m=+76.254514894" I0507 14:54:24.371811 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.371799433 +0000 UTC m=+76.282560575" I0507 14:54:24.371841 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.371831089 +0000 UTC m=+76.282592256" I0507 14:54:24.371850 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.371841718 +0000 UTC m=+76.282602860" I0507 14:54:24.371808 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.371791532 +0000 UTC m=+76.282552718" I0507 14:54:24.371912 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.371903329 +0000 UTC m=+76.282664464" I0507 14:54:24.410306 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs-1\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.418986 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs-1\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.442498 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs-1\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.443146 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs-1\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.743088 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="tekton-kueue/tekton-kueue-selfsigned-issuer" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.74307117 +0000 UTC m=+76.653832325" I0507 14:54:24.765383 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:24.76537022 +0000 UTC m=+76.676131355" I0507 14:54:24.800004 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:24.799991888 +0000 UTC m=+76.710753034" I0507 14:54:24.835010 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.835443 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:24.835434969 +0000 UTC m=+76.746196180" I0507 14:54:24.858095 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.858530 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:24.858521652 +0000 UTC m=+76.769282803" I0507 14:54:24.863476 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.918272 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:24.918299 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:54:24.918294628 +0000 UTC m=+76.829055764" I0507 14:54:24.918269 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.918243429 +0000 UTC m=+76.829004588" I0507 14:54:24.943666 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-05-07 14:54:24.943656134 +0000 UTC m=+76.854417291" I0507 14:54:24.943686 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:24.943704 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-05-07 14:54:24.943700494 +0000 UTC m=+76.854461637" I0507 14:54:24.952284 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.952332 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:24.952351 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:54:24.95234471 +0000 UTC m=+76.863105848" I0507 14:54:24.971044 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:24.971080 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:24.971094 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-05-07 14:54:24.971089763 +0000 UTC m=+76.881850898" I0507 14:54:25.078422 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:25.078407106 +0000 UTC m=+76.989168264" I0507 14:54:25.103481 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:25.103468734 +0000 UTC m=+77.014229869" I0507 14:54:25.138293 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:25.138280637 +0000 UTC m=+77.049041827" I0507 14:54:25.171348 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:25.171758 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:25.171751872 +0000 UTC m=+77.082513022" I0507 14:54:25.398516 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:25.451696 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:25.511649 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:25.511632405 +0000 UTC m=+77.422393570" I0507 14:54:25.960750 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:25.960735222 +0000 UTC m=+77.871496362" I0507 14:54:26.010311 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.010295228 +0000 UTC m=+77.921056364" I0507 14:54:26.161749 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.161759 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.161745476 +0000 UTC m=+78.072506629" I0507 14:54:26.161784 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.161775525 +0000 UTC m=+78.072536678" E0507 14:54:26.233487 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 14:54:26.233536 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.233528556 +0000 UTC m=+78.144289695" E0507 14:54:26.233551 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 14:54:26.309843 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.309864 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.309859387 +0000 UTC m=+78.220620535" I0507 14:54:26.309860 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.309849119 +0000 UTC m=+78.220610254" I0507 14:54:26.309897 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:26.309888064 +0000 UTC m=+78.220649211" I0507 14:54:26.310020 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.310016717 +0000 UTC m=+78.220777867" I0507 14:54:26.310021 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.310079 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.310073204 +0000 UTC m=+78.220834359" I0507 14:54:26.347610 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:26.347666 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.347690 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.347685082 +0000 UTC m=+78.258446239" I0507 14:54:26.428822 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-05-07 14:54:26.428804138 +0000 UTC m=+78.339565298" E0507 14:54:26.435523 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" E0507 14:54:26.435599 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 14:54:26.435628 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 14:54:26.435658 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" I0507 14:54:26.551126 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:26.551197 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.551222 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.551213837 +0000 UTC m=+78.461974993" I0507 14:54:26.612270 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:26.612765 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:26.612756231 +0000 UTC m=+78.523517434" I0507 14:54:26.703242 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:26.703403 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 14:54:26.703432 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-05-07 14:54:26.703424452 +0000 UTC m=+78.614185615" I0507 14:54:27.349930 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:27.399863 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:27.950432 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:28.020467 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:28.02044933 +0000 UTC m=+79.931210498" I0507 14:54:28.097534 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:28.169788 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:28.169772985 +0000 UTC m=+80.080534139" I0507 14:54:28.197015 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:28.260477 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Approved" lastTransitionTime="2026-05-07 14:54:28.260460485 +0000 UTC m=+80.171221642" I0507 14:54:28.414474 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:28.414460594 +0000 UTC m=+80.325221733" I0507 14:54:28.722694 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:28.722676186 +0000 UTC m=+80.633437345" I0507 14:54:28.756983 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-05-07 14:54:28.756970287 +0000 UTC m=+80.667731422" I0507 14:54:29.452435 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:29.452418493 +0000 UTC m=+81.363179650" I0507 14:54:29.702423 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:29.702409829 +0000 UTC m=+81.613171031" I0507 14:54:29.702471 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:29.702461619 +0000 UTC m=+81.613222758" I0507 14:54:29.848087 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:29.848521 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:29.848513633 +0000 UTC m=+81.759274775" I0507 14:54:30.057124 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:30.057363 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:30.057355115 +0000 UTC m=+81.968116250" I0507 14:54:30.133032 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:30.133018228 +0000 UTC m=+82.043779367" I0507 14:54:30.753780 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:30.804184 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:30.853201 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:30.911433 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:30.911399736 +0000 UTC m=+82.822160946" I0507 14:54:31.104218 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I0507 14:54:31.104656 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-05-07 14:54:31.104648537 +0000 UTC m=+83.015409672" I0507 14:54:31.300653 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again"