I1005 01:57:30.174166 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="canary" git_commit="" go_version="go1.26.7 (Red Hat 1.26.7-1.el9_8) X:strictfipsruntime" platform="linux/amd64" I1005 01:57:30.174232 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"] I1005 01:57:30.174477 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1005 01:57:30.174489 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I1005 01:57:30.174493 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1005 01:57:30.174495 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1005 01:57:30.174499 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I1005 01:57:30.174502 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1005 01:57:30.177208 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I1005 01:57:30.177245 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1005 01:57:30.177253 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1005 01:57:30.177258 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1005 01:57:30.177523 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1005 01:57:30.177578 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I1005 01:57:30.177580 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1005 01:57:30.178914 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" E1005 01:57:30.193765 1 leaderelection.go:452] "Error retrieving lease lock" err="leases.coordination.k8s.io \"cert-manager-controller\" is forbidden: User \"system:serviceaccount:cert-manager:cert-manager\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-system\"" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1005 01:57:47.201649 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1005 01:57:47.204357 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1005 01:57:47.206589 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1005 01:57:47.208944 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1005 01:57:47.210733 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1005 01:57:47.210802 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1005 01:57:47.212817 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I1005 01:57:47.215058 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1005 01:57:47.218095 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1005 01:57:47.219699 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I1005 01:57:47.221102 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1005 01:57:47.221171 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1005 01:57:47.222532 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I1005 01:57:47.222627 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I1005 01:57:47.224013 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1005 01:57:47.225449 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1005 01:57:47.226803 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1005 01:57:47.227999 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1005 01:57:47.228013 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I1005 01:57:47.228159 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1005 01:57:47.229953 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1005 01:57:47.232423 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1005 01:57:47.234416 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1005 01:57:47.234433 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1005 01:57:47.234508 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1005 01:57:47.235856 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1005 01:57:47.244605 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.244896 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.244970 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.245228 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.245280 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.245760 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.246765 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.246882 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.246894 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.246928 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.268342 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1005 01:57:47.322744 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="konflux-kite/selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-05 01:57:47.322725818 +0000 UTC m=+17.165493686" I1005 01:57:47.323895 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/postgresql-cert" resource_name="postgresql-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="postgresql-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" I1005 01:57:47.324079 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/serving-cert" resource_name="serving-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="konflux-kite-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" I1005 01:57:47.340222 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" lastTransitionTime="2026-10-05 01:57:47.340208999 +0000 UTC m=+17.182976856" I1005 01:57:47.340367 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Ready" lastTransitionTime="2026-10-05 01:57:47.340357039 +0000 UTC m=+17.183124896" I1005 01:57:47.399983 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Ready" lastTransitionTime="2026-10-05 01:57:47.39997215 +0000 UTC m=+17.242740012" I1005 01:57:47.413933 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"postgresql-cert\": the object has been modified; please apply your changes to the latest version and try again" E1005 01:58:32.677257 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1005 01:58:32.677315 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.677306884 +0000 UTC m=+62.520074742" E1005 01:58:32.677333 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1005 01:58:32.698825 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" E1005 01:58:32.699096 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1005 01:58:32.699148 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1005 01:58:32.699170 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" I1005 01:58:32.746428 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:32.746429 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.746417503 +0000 UTC m=+62.589185383" I1005 01:58:32.746459 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:32.746454525 +0000 UTC m=+62.589222397" I1005 01:58:32.756885 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:32.756910 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-10-05 01:58:32.756903838 +0000 UTC m=+62.599671712" I1005 01:58:32.756913 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.756904923 +0000 UTC m=+62.599673013" I1005 01:58:32.770009 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:32.770048 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.770042835 +0000 UTC m=+62.612810711" I1005 01:58:32.780606 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:32.780644 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.780639261 +0000 UTC m=+62.623407132" I1005 01:58:32.810004 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.80999467 +0000 UTC m=+62.652762548" I1005 01:58:32.813664 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:32.815701 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:32.894701 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:32.894673033 +0000 UTC m=+62.737440909" I1005 01:58:32.897956 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:32.897941889 +0000 UTC m=+62.740709761" I1005 01:58:32.960348 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.960335483 +0000 UTC m=+62.803103345" I1005 01:58:32.974224 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:32.974205509 +0000 UTC m=+62.816973371" I1005 01:58:33.005279 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.005263094 +0000 UTC m=+62.848030954" I1005 01:58:33.005302 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.005290505 +0000 UTC m=+62.848058398" I1005 01:58:33.045156 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.045145015 +0000 UTC m=+62.887912873" I1005 01:58:33.045628 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:33.045786 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.045780716 +0000 UTC m=+62.888548573" I1005 01:58:33.074580 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:33.101592 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:33.146996 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.146987259 +0000 UTC m=+62.989755120" I1005 01:58:33.287670 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:33.288317 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:33.288310052 +0000 UTC m=+63.131077916" I1005 01:58:33.534640 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:33.584460 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:46.025407 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-05 01:58:46.025387808 +0000 UTC m=+75.868155680" I1005 01:58:46.083477 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:46.083493 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-05 01:58:46.08348151 +0000 UTC m=+75.926249385" I1005 01:58:46.083501 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-05 01:58:46.083496865 +0000 UTC m=+75.926264722" I1005 01:58:46.108470 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:46.108515 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:46.108533 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-05 01:58:46.108526866 +0000 UTC m=+75.951294747" I1005 01:58:46.238283 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:46.260228 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:46.260204458 +0000 UTC m=+76.102972347" I1005 01:58:46.310276 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:46.310262761 +0000 UTC m=+76.153030619" I1005 01:58:46.350221 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:46.350208424 +0000 UTC m=+76.192976281" I1005 01:58:46.375062 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:46.375665 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:46.375658134 +0000 UTC m=+76.218425998" I1005 01:58:46.399370 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.401514 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="openshift-kueue-operator/selfsigned" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.401500298 +0000 UTC m=+81.244268171" I1005 01:58:51.418202 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.418184609 +0000 UTC m=+81.260952524" I1005 01:58:51.418214 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:51.418349 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:51.418340956 +0000 UTC m=+81.261108817" I1005 01:58:51.441792 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.441795 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:51.441819 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.441803501 +0000 UTC m=+81.284571377" I1005 01:58:51.441835 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-05 01:58:51.441827458 +0000 UTC m=+81.284595333" I1005 01:58:51.441841 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:51.441856 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:51.441850553 +0000 UTC m=+81.284618421" I1005 01:58:51.458840 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.458874 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.458869268 +0000 UTC m=+81.301637149" I1005 01:58:51.462140 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.462133265 +0000 UTC m=+81.304901137" I1005 01:58:51.462157 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:51.462175 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:51.462169709 +0000 UTC m=+81.304937587" I1005 01:58:51.478830 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.478873 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:51.478888 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:51.478884486 +0000 UTC m=+81.321652356" I1005 01:58:51.589386 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.627467 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:51.627454764 +0000 UTC m=+81.470222633" I1005 01:58:51.628364 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:51.628338256 +0000 UTC m=+81.471106139" I1005 01:58:51.659039 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.659029682 +0000 UTC m=+81.501797539" I1005 01:58:51.659454 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.659443422 +0000 UTC m=+81.502211281" I1005 01:58:51.665619 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.684985 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:51.684961065 +0000 UTC m=+81.527728945" I1005 01:58:51.695098 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:51.69508806 +0000 UTC m=+81.537855947" I1005 01:58:51.703206 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:51.703197822 +0000 UTC m=+81.545965685" I1005 01:58:51.721630 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:51.721620778 +0000 UTC m=+81.564388635" I1005 01:58:51.809093 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.809856 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:51.809845622 +0000 UTC m=+81.652613493" I1005 01:58:51.908606 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:51.909261 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:51.909253616 +0000 UTC m=+81.752021488" I1005 01:58:52.515332 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:52.5153179 +0000 UTC m=+82.358085761" I1005 01:58:52.608317 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:52.658918 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:52.708229 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:52.758975 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:52.862360 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:52.863010 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:52.863002663 +0000 UTC m=+82.705770521" I1005 01:58:53.158304 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:56.907579 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-10-05 01:58:56.907563205 +0000 UTC m=+86.750331081" I1005 01:58:56.907621 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:56.907642 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-05 01:58:56.90763596 +0000 UTC m=+86.750403817" I1005 01:58:56.926545 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:56.926589 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-10-05 01:58:56.92658382 +0000 UTC m=+86.769351692" I1005 01:58:57.015811 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="tekton-kueue/tekton-kueue-selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.015797135 +0000 UTC m=+86.858564992" I1005 01:58:57.038752 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.061443 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:57.061447 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.061435453 +0000 UTC m=+86.904203472" I1005 01:58:57.061464 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:57.061460197 +0000 UTC m=+86.904228053" I1005 01:58:57.062222 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:57.062241 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-05 01:58:57.062236182 +0000 UTC m=+86.905004039" I1005 01:58:57.062250 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.062245673 +0000 UTC m=+86.905013549" I1005 01:58:57.086198 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.086245 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:57.086260 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-05 01:58:57.086254687 +0000 UTC m=+86.929022559" I1005 01:58:57.093296 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.093342 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1005 01:58:57.093357 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-05 01:58:57.093352396 +0000 UTC m=+86.936120253" I1005 01:58:57.098177 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:57.098152949 +0000 UTC m=+86.940920824" I1005 01:58:57.131730 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.131716912 +0000 UTC m=+86.974484770" I1005 01:58:57.190560 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:57.190541916 +0000 UTC m=+87.033309796" I1005 01:58:57.221335 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.257972 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.258265 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:57.258253814 +0000 UTC m=+87.101021686" I1005 01:58:57.293766 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.293754294 +0000 UTC m=+87.136522151" I1005 01:58:57.304062 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-05 01:58:57.304048283 +0000 UTC m=+87.146816152" I1005 01:58:57.345743 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-05 01:58:57.345729842 +0000 UTC m=+87.188497699" I1005 01:58:57.578104 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:57.578091084 +0000 UTC m=+87.420858953" I1005 01:58:57.868924 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:57.869530 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:57.869523307 +0000 UTC m=+87.712291172" I1005 01:58:57.931252 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-05 01:58:57.931239927 +0000 UTC m=+87.774007784" I1005 01:58:58.103813 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:58.272144 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:58.372768 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1005 01:58:58.724822 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again"