I1008 14:49:39.243072 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="canary" git_commit="" go_version="go1.26.7 (Red Hat 1.26.7-1.el9_8) X:strictfipsruntime" platform="linux/amd64" I1008 14:49:39.243142 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"] I1008 14:49:39.243392 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1008 14:49:39.243404 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I1008 14:49:39.243408 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1008 14:49:39.243411 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1008 14:49:39.243413 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I1008 14:49:39.243416 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1008 14:49:39.245151 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I1008 14:49:39.245179 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1008 14:49:39.245190 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1008 14:49:39.245195 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1008 14:49:39.245466 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1008 14:49:39.245514 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I1008 14:49:39.245531 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1008 14:49:39.246731 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" E1008 14:49:39.277789 1 leaderelection.go:452] "Error retrieving lease lock" err="leases.coordination.k8s.io \"cert-manager-controller\" is forbidden: User \"system:serviceaccount:cert-manager:cert-manager\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-system\"" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1008 14:50:07.884488 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1008 14:50:07.886246 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1008 14:50:07.886262 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I1008 14:50:07.886315 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1008 14:50:07.887730 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1008 14:50:07.889823 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1008 14:50:07.891484 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1008 14:50:07.892670 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I1008 14:50:07.893911 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1008 14:50:07.895062 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1008 14:50:07.896665 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1008 14:50:07.897893 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1008 14:50:07.900091 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1008 14:50:07.901195 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1008 14:50:07.901207 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1008 14:50:07.901211 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1008 14:50:07.901216 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1008 14:50:07.901299 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1008 14:50:07.902366 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I1008 14:50:07.902477 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1008 14:50:07.903666 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1008 14:50:07.904882 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1008 14:50:07.906124 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1008 14:50:07.907393 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1008 14:50:07.908558 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I1008 14:50:07.911189 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I1008 14:50:07.916268 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.916423 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.916516 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.917384 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.917513 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.917522 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.918192 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.918343 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.918804 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.918907 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:07.942237 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="pkg/mod/k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I1008 14:50:40.017095 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-08 14:50:40.017080635 +0000 UTC m=+60.790720118" I1008 14:50:40.017188 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:50:40.017220 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-08 14:50:40.017214026 +0000 UTC m=+60.790853512" I1008 14:50:40.177741 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:50:40.177800 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-08 14:50:40.177794147 +0000 UTC m=+60.951433626" I1008 14:50:40.308769 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:50:40.328069 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-08 14:50:40.328055548 +0000 UTC m=+61.101695027" I1008 14:50:40.482219 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-08 14:50:40.482191901 +0000 UTC m=+61.255831369" I1008 14:50:40.578965 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-08 14:50:40.578952236 +0000 UTC m=+61.352591701" I1008 14:50:40.684483 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:50:40.684471032 +0000 UTC m=+61.458110509" I1008 14:50:40.743117 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:50:40.743783 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:50:40.743774526 +0000 UTC m=+61.517413991" I1008 14:50:40.802732 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:50:40.803303 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:50:40.803297303 +0000 UTC m=+61.576936772" E1008 14:51:02.390318 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1008 14:51:02.390381 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.390373661 +0000 UTC m=+83.164013131" E1008 14:51:02.390401 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1008 14:51:02.405990 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" E1008 14:51:02.406041 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller.setup" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1008 14:51:02.406065 1 sync.go:62] "error setting up issuer" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" resource_name="caching-ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1008 14:51:02.406086 1 controller.go:155] "re-queuing item due to error processing" err="secrets \"caching-root-ca-secret\" not found" logger="cert-manager.controller" I1008 14:51:02.439166 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.439151796 +0000 UTC m=+83.212791287" I1008 14:51:02.439189 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:02.439215 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:02.439210637 +0000 UTC m=+83.212850102" I1008 14:51:02.439232 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.439225356 +0000 UTC m=+83.212864842" I1008 14:51:02.439266 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/caching-self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:02.439291 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Issuing" lastTransitionTime="2026-10-08 14:51:02.439285367 +0000 UTC m=+83.212924842" I1008 14:51:02.455524 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:02.455585 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="caching/caching-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:02.455602 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="caching/caching-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:02.45559827 +0000 UTC m=+83.229237769" I1008 14:51:02.465510 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:02.465562 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.465554662 +0000 UTC m=+83.239194156" I1008 14:51:02.496783 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="caching-self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.496776235 +0000 UTC m=+83.270415700" I1008 14:51:02.499727 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:02.532668 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:02.532638674 +0000 UTC m=+83.306278153" I1008 14:51:02.565018 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/caching-self-signed-ca-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.565008159 +0000 UTC m=+83.338647624" I1008 14:51:02.584973 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:02.584950385 +0000 UTC m=+83.358589865" I1008 14:51:02.602076 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:02.602066463 +0000 UTC m=+83.375705928" I1008 14:51:02.603571 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="caching-ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:02.603563333 +0000 UTC m=+83.377202799" I1008 14:51:02.603605 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/caching-self-signed-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:02.603594569 +0000 UTC m=+83.377234044" I1008 14:51:02.626821 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="caching/caching-cert-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:02.626813187 +0000 UTC m=+83.400452651" I1008 14:51:02.626967 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:02.658646 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:02.658638808 +0000 UTC m=+83.432278273" I1008 14:51:02.800750 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:02.801325 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="caching/caching-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:02.801319315 +0000 UTC m=+83.574958780" I1008 14:51:03.056786 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:03.102703 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"caching-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.214557 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="openshift-kueue-operator/selfsigned" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.21454425 +0000 UTC m=+91.988183730" I1008 14:51:11.236105 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/webhook-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:11.236146 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.23613727 +0000 UTC m=+92.009776751" I1008 14:51:11.236127 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:11.236122407 +0000 UTC m=+92.009761873" I1008 14:51:11.250600 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.250632 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.250627838 +0000 UTC m=+92.024267317" I1008 14:51:11.255877 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:11.255892 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-08 14:51:11.255888093 +0000 UTC m=+92.029527558" I1008 14:51:11.255920 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.255912851 +0000 UTC m=+92.029552335" I1008 14:51:11.271789 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.271826 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:11.271840 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Issuing" lastTransitionTime="2026-10-08 14:51:11.271836492 +0000 UTC m=+92.045475958" I1008 14:51:11.287183 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:11.287199 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:11.287195624 +0000 UTC m=+92.060835089" I1008 14:51:11.287215 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.287207157 +0000 UTC m=+92.060846641" I1008 14:51:11.300841 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.300881 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="openshift-kueue-operator/kueue-visibility-server-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:11.300898 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:11.300894029 +0000 UTC m=+92.074533495" I1008 14:51:11.337809 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.363011 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.381528 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:11.381518601 +0000 UTC m=+92.155158096" I1008 14:51:11.382640 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:11.382623807 +0000 UTC m=+92.156263287" I1008 14:51:11.390371 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:11.390356797 +0000 UTC m=+92.163996273" I1008 14:51:11.408628 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/webhook-cert-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.408621712 +0000 UTC m=+92.182261177" I1008 14:51:11.408705 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.408698711 +0000 UTC m=+92.182338176" I1008 14:51:11.410819 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="openshift-kueue-operator/kueue-visibility-server-cert-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:11.410812501 +0000 UTC m=+92.184451966" I1008 14:51:11.577603 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:11.577590685 +0000 UTC m=+92.351230161" I1008 14:51:11.626185 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:11.626173058 +0000 UTC m=+92.399812531" I1008 14:51:11.675255 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:11.675243683 +0000 UTC m=+92.448883163" I1008 14:51:11.819963 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.820567 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:11.820559987 +0000 UTC m=+92.594199460" I1008 14:51:11.920387 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:11.921009 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/webhook-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:11.921002537 +0000 UTC m=+92.694642009" I1008 14:51:12.019681 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:12.020296 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="openshift-kueue-operator/kueue-visibility-server-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:12.020290418 +0000 UTC m=+92.793929883" I1008 14:51:12.570262 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:12.620096 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:12.669911 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"webhook-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:12.719821 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kueue-visibility-server-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:16.864508 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:16.864533 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-08 14:51:16.864527408 +0000 UTC m=+97.638166873" I1008 14:51:16.864540 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" lastTransitionTime="2026-10-08 14:51:16.864528351 +0000 UTC m=+97.638167838" I1008 14:51:16.890617 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:16.890679 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:16.890694 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-08 14:51:16.890689818 +0000 UTC m=+97.664329291" I1008 14:51:16.978826 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="tekton-kueue/tekton-kueue-selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-08 14:51:16.978813564 +0000 UTC m=+97.752453047" I1008 14:51:17.015997 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:17.015986687 +0000 UTC m=+97.789626374" I1008 14:51:17.044228 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.044219636 +0000 UTC m=+97.817859115" I1008 14:51:17.044248 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-webhook-metrics-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:17.044260 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:17.044270 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.0442634 +0000 UTC m=+97.817902875" I1008 14:51:17.044279 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:17.044273734 +0000 UTC m=+97.817913212" I1008 14:51:17.044272 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Issuing" lastTransitionTime="2026-10-08 14:51:17.044266206 +0000 UTC m=+97.817905690" I1008 14:51:17.070803 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-controller-manager-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.070796528 +0000 UTC m=+97.844435993" I1008 14:51:17.087111 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.087135 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.087155 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="tekton-kueue/tekton-kueue-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:51:17.087171 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:51:17.0871662 +0000 UTC m=+97.860805687" I1008 14:51:17.087189 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.087181769 +0000 UTC m=+97.860821256" I1008 14:51:17.141325 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-controller-manager-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:17.141315418 +0000 UTC m=+97.914954883" I1008 14:51:17.191536 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.208830 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.222624 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-controller-manager-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.279035 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:17.279022322 +0000 UTC m=+98.052661856" I1008 14:51:17.325796 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-webhook-metrics-certs-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.325785684 +0000 UTC m=+98.099425149" I1008 14:51:17.333600 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.357389 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Approved" lastTransitionTime="2026-10-08 14:51:17.357370056 +0000 UTC m=+98.131009536" I1008 14:51:17.525757 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="tekton-kueue/tekton-kueue-serving-cert-1" condition="Ready" lastTransitionTime="2026-10-08 14:51:17.525737592 +0000 UTC m=+98.299377065" I1008 14:51:17.698409 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:17.69839496 +0000 UTC m=+98.472034431" I1008 14:51:17.921107 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:17.921714 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:17.921707794 +0000 UTC m=+98.695347266" I1008 14:51:18.030483 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:18.030470617 +0000 UTC m=+98.804110098" I1008 14:51:18.233677 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-webhook-metrics-certs" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:18.233637023 +0000 UTC m=+99.007276488" I1008 14:51:18.374672 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:18.375257 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="tekton-kueue/tekton-kueue-serving-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 14:51:18.375250915 +0000 UTC m=+99.148890385" I1008 14:51:18.430645 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:18.479678 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:18.526911 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-webhook-metrics-certs\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:51:18.772731 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"tekton-kueue-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1008 14:52:02.657596 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/postgresql-cert" condition="Ready" lastTransitionTime="2026-10-08 14:52:02.657579514 +0000 UTC m=+143.431218984" I1008 14:52:02.657860 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/postgresql-cert" resource_name="postgresql-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="postgresql-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" I1008 14:52:02.697411 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="konflux-kite/selfsigned-issuer" condition="Ready" lastTransitionTime="2026-10-08 14:52:02.697393967 +0000 UTC m=+143.471033451" I1008 14:52:02.747329 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="konflux-kite/serving-cert" resource_name="serving-cert" resource_namespace="konflux-kite" resource_kind="Certificate" resource_version="v1" secret="konflux-kite-tls" message="Secret is missing these Managed Labels: [controller.cert-manager.io/fao]" I1008 14:52:02.748110 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Ready" lastTransitionTime="2026-10-08 14:52:02.748096656 +0000 UTC m=+143.521736142" I1008 14:52:02.762118 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="konflux-kite/serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1008 14:52:02.762157 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="konflux-kite/serving-cert" condition="Issuing" lastTransitionTime="2026-10-08 14:52:02.762150702 +0000 UTC m=+143.535790174" I1008 14:52:02.769459 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"serving-cert\": the object has been modified; please apply your changes to the latest version and try again"