I1001 02:14:49.428678       1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="canary" git_commit="" go_version="go1.26.7 (Red Hat 1.26.7-1.el9_8) X:strictfipsruntime" platform="linux/amd64"
I1001 02:14:49.428768       1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"]
I1001 02:14:49.429035       1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I1001 02:14:49.429048       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I1001 02:14:49.429052       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true
I1001 02:14:49.429055       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1001 02:14:49.429058       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1001 02:14:49.429060       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I1001 02:14:49.430999       1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I1001 02:14:49.431033       1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I1001 02:14:49.431044       1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I1001 02:14:49.431050       1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I1001 02:14:49.431473       1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I1001 02:14:49.431542       1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I1001 02:14:49.431563       1 controller.go:190] "starting leader election" logger="cert-manager.controller"
I1001 02:14:49.434264       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
E1001 02:14:49.455623       1 leaderelection.go:452] "Error retrieving lease lock" err="leases.coordination.k8s.io \"cert-manager-controller\" is forbidden: User \"system:serviceaccount:cert-manager:cert-manager\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-system\"" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1001 02:15:04.635543       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1001 02:15:04.639030       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I1001 02:15:04.640458       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I1001 02:15:04.641786       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I1001 02:15:04.643110       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders"
I1001 02:15:04.644470       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I1001 02:15:04.644484       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I1001 02:15:04.644554       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I1001 02:15:04.645979       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I1001 02:15:04.646070       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I1001 02:15:04.647276       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I1001 02:15:04.649321       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I1001 02:15:04.651610       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I1001 02:15:04.653047       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I1001 02:15:04.654526       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I1001 02:15:04.655814       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I1001 02:15:04.655828       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I1001 02:15:04.655910       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I1001 02:15:04.657313       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I1001 02:15:04.658661       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I1001 02:15:04.659839       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I1001 02:15:04.659934       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I1001 02:15:04.661152       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges"
I1001 02:15:04.663949       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I1001 02:15:04.664072       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I1001 02:15:04.665295       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers"
I1001 02:15:04.675374       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.683543       1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.683796       1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.683915       1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.683932       1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.683995       1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.684375       1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.684460       1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.684520       1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.684670       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.709339       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I1001 02:15:04.741046       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-01 02:15:04.741030154 +0000 UTC m=+15.330768901"
I1001 02:15:04.758418       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:15:04.758464       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-01 02:15:04.758457745 +0000 UTC m=+15.348196481"
I1001 02:15:04.766412       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-01 02:15:04.766395952 +0000 UTC m=+15.356134691"
I1001 02:15:04.768446       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:04.768497       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:15:04.768515       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-01 02:15:04.76851068 +0000 UTC m=+15.358249416"
I1001 02:15:04.896279       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-01 02:15:04.896248294 +0000 UTC m=+15.485987057"
I1001 02:15:04.939531       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:04.939518307 +0000 UTC m=+15.529257044"
I1001 02:15:04.982141       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:04.982126996 +0000 UTC m=+15.571865732"
I1001 02:15:05.011521       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
E1001 02:15:09.347093       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I1001 02:15:09.347144       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.347136623 +0000 UTC m=+19.936875359"
E1001 02:15:09.347162       1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1001 02:15:09.378418       1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller"
E1001 02:15:09.378597       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1001 02:15:09.378639       1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1001 02:15:09.378659       1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller"
I1001 02:15:09.478466       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:15:09.478500       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.478485995 +0000 UTC m=+20.068224758"
I1001 02:15:09.478510       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:15:09.478503754 +0000 UTC m=+20.068242496"
I1001 02:15:09.510816       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.511011       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.511000875 +0000 UTC m=+20.100739622"
I1001 02:15:09.519900       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:15:09.519923       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-10-01 02:15:09.519917937 +0000 UTC m=+20.109656680"
I1001 02:15:09.519960       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.519950236 +0000 UTC m=+20.109688984"
I1001 02:15:09.559874       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.559923       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.559916561 +0000 UTC m=+20.149655312"
I1001 02:15:09.565902       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.592232       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.627385       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Approved" lastTransitionTime="2026-10-01 02:15:09.627356411 +0000 UTC m=+20.217095176"
I1001 02:15:09.687799       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Approved" lastTransitionTime="2026-10-01 02:15:09.68777629 +0000 UTC m=+20.277515037"
I1001 02:15:09.710910       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.710883514 +0000 UTC m=+20.300622277"
I1001 02:15:09.740933       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.740918662 +0000 UTC m=+20.330657405"
I1001 02:15:09.740983       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.740973373 +0000 UTC m=+20.330712110"
I1001 02:15:09.741011       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.740994953 +0000 UTC m=+20.330733715"
I1001 02:15:09.741008       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.740999283 +0000 UTC m=+20.330738021"
I1001 02:15:09.741055       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.741048702 +0000 UTC m=+20.330787462"
I1001 02:15:09.835448       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"caching-self-signed-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.837267       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"caching-self-signed-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.850531       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"caching-self-signed-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.852358       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"caching-self-signed-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:09.882600       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-10-01 02:15:09.882583812 +0000 UTC m=+20.472322562"
I1001 02:15:09.938859       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:09.938843227 +0000 UTC m=+20.528581970"
I1001 02:15:10.022512       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:10.022498807 +0000 UTC m=+20.612237560"
I1001 02:15:10.022537       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:10.022525967 +0000 UTC m=+20.612264707"
I1001 02:15:10.080605       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:10.08058929 +0000 UTC m=+20.670328035"
I1001 02:15:10.092674       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:10.185581       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:10.18556919 +0000 UTC m=+20.775307926"
I1001 02:15:10.368396       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:15:11.747325       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/postgresql-cert" resource_name="postgresql-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="postgresql-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]"
I1001 02:15:11.749401       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Ready" lastTransitionTime="2026-10-01 02:15:11.749388171 +0000 UTC m=+22.339126933"
I1001 02:15:11.769003       1 core_filteredsecrets.go:277] "warning: possible internal error: stale cache: secret found both in typed cache and in partial cache: Please report this by opening an issue with this error and cert-manager controller logs and stack trace https://github.com/cert-manager/cert-manager/issues/new/choose" logger="cert-manager.controller" namespace="konflux-kite" secret="konflux-kite/postgresql-tls"
I1001 02:15:12.202113       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="konflux-kite/selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-01 02:15:12.202098388 +0000 UTC m=+22.791837135"
I1001 02:15:16.142447       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/serving-cert" resource_name="serving-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="konflux-kite-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]"
I1001 02:15:16.148962       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" lastTransitionTime="2026-10-01 02:15:16.14895247 +0000 UTC m=+26.738691223"
I1001 02:15:16.174093       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" oldStatus="True" status="False" lastTransitionTime="2026-10-01 02:15:16.174084052 +0000 UTC m=+26.763822804"
I1001 02:15:16.198720       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:15:16.198710462 +0000 UTC m=+26.788449198"
I1001 02:16:29.778759       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="openshift-kueue-operator/selfsigned" condition="Ready" lastTransitionTime="2026-10-01 02:16:29.778743656 +0000 UTC m=+100.368482410"
I1001 02:16:29.805402       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:29.805425       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:16:29.805419208 +0000 UTC m=+100.395157951"
I1001 02:16:29.805446       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-01 02:16:29.805434818 +0000 UTC m=+100.395173570"
I1001 02:16:29.838243       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:29.838287       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-01 02:16:29.838279306 +0000 UTC m=+100.428018054"
I1001 02:16:29.854467       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:29.854497       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:29.854490608 +0000 UTC m=+100.444229347"
I1001 02:16:29.854466       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-10-01 02:16:29.854453919 +0000 UTC m=+100.444192666"
I1001 02:16:29.887364       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:29.887389       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:16:29.88738412 +0000 UTC m=+100.477122868"
I1001 02:16:29.887358       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" lastTransitionTime="2026-10-01 02:16:29.887342791 +0000 UTC m=+100.477081562"
I1001 02:16:29.888650       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:29.888702       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:29.888723       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:29.88871711 +0000 UTC m=+100.478455855"
I1001 02:16:29.920642       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:29.920683       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:29.920702       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:16:29.920696436 +0000 UTC m=+100.510435188"
I1001 02:16:30.018549       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:30.068131       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:30.068100337 +0000 UTC m=+100.657839094"
I1001 02:16:30.096097       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:30.096070787 +0000 UTC m=+100.685809539"
I1001 02:16:30.122015       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:30.121991043 +0000 UTC m=+100.711729804"
I1001 02:16:30.123550       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:30.123540899 +0000 UTC m=+100.713279634"
I1001 02:16:30.128278       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:30.12827047 +0000 UTC m=+100.718009206"
I1001 02:16:30.148690       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:30.14868214 +0000 UTC m=+100.738420876"
I1001 02:16:30.175700       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:30.175688896 +0000 UTC m=+100.765427644"
I1001 02:16:30.181055       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:30.181045711 +0000 UTC m=+100.770784497"
I1001 02:16:30.248138       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:30.248126142 +0000 UTC m=+100.837864886"
I1001 02:16:30.342707       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:30.343373       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:30.343366032 +0000 UTC m=+100.933104775"
I1001 02:16:30.443574       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:30.601440       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:30.602040       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:30.602033407 +0000 UTC m=+101.191772143"
I1001 02:16:31.111356       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:31.177351       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:37.276648       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.276675       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.276669995 +0000 UTC m=+107.866408735"
I1001 02:16:37.276704       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-10-01 02:16:37.276692385 +0000 UTC m=+107.866431137"
I1001 02:16:37.337632       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:37.337673       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.337687       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.337682705 +0000 UTC m=+107.927421441"
I1001 02:16:37.527284       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="tekton-kueue/tekton-kueue-selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-01 02:16:37.527270649 +0000 UTC m=+108.117009400"
I1001 02:16:37.610508       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.610529       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.610524423 +0000 UTC m=+108.200263159"
I1001 02:16:37.610538       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" lastTransitionTime="2026-10-01 02:16:37.61052578 +0000 UTC m=+108.200264546"
I1001 02:16:37.618336       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-01 02:16:37.618330497 +0000 UTC m=+108.208069244"
I1001 02:16:37.618364       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.618388       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.618381968 +0000 UTC m=+108.208120728"
I1001 02:16:37.653516       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:37.656765       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.656785       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.656780099 +0000 UTC m=+108.246518835"
I1001 02:16:37.668516       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:37.668491492 +0000 UTC m=+108.258230258"
I1001 02:16:37.675473       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:37.675511       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1001 02:16:37.675531       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-01 02:16:37.675524961 +0000 UTC m=+108.265263716"
I1001 02:16:37.753583       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:37.75357143 +0000 UTC m=+108.343310166"
I1001 02:16:37.874313       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:37.874282521 +0000 UTC m=+108.464021264"
I1001 02:16:37.932585       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:37.944538       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:37.944527449 +0000 UTC m=+108.534266200"
I1001 02:16:38.016826       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:38.016814545 +0000 UTC m=+108.606553282"
I1001 02:16:38.068448       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:38.105033       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-01 02:16:38.105024573 +0000 UTC m=+108.694763328"
I1001 02:16:38.155575       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:38.15556561 +0000 UTC m=+108.745304362"
I1001 02:16:38.232276       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-01 02:16:38.232265703 +0000 UTC m=+108.822004439"
I1001 02:16:38.234384       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:38.234928       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:38.234923722 +0000 UTC m=+108.824662466"
I1001 02:16:38.446266       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:38.554764       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:38.554751241 +0000 UTC m=+109.144489977"
I1001 02:16:38.693376       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"
I1001 02:16:38.693947       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-01 02:16:38.693940357 +0000 UTC m=+109.283679100"
I1001 02:16:38.887785       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"