I0703 07:26:23.088492 1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64" I0703 07:26:23.088599 1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0703 07:26:23.088775 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0703 07:26:23.088791 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0703 07:26:23.088795 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0703 07:26:23.088800 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0703 07:26:23.088803 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0703 07:26:23.091481 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0703 07:26:23.091498 1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0703 07:26:23.091505 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0703 07:26:23.091874 1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0703 07:26:23.091960 1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0703 07:26:23.091962 1 controller.go:182] "starting leader election" logger="cert-manager.controller" I0703 07:26:23.094148 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... I0703 07:26:23.104028 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0703 07:26:23.104193 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0703 07:26:23.104206 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0703 07:26:23.104212 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0703 07:26:23.189771 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0703 07:26:23.191841 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers" I0703 07:26:23.193686 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0703 07:26:23.195610 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0703 07:26:23.288744 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0703 07:26:23.295709 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0703 07:26:23.388213 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0703 07:26:23.389681 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0703 07:26:23.389782 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0703 07:26:23.391764 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0703 07:26:23.391906 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges" I0703 07:26:23.393749 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0703 07:26:23.395638 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0703 07:26:23.397541 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders" I0703 07:26:23.489766 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0703 07:26:23.491977 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0703 07:26:23.494313 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0703 07:26:23.588220 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0703 07:26:23.590366 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0703 07:26:23.592415 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0703 07:26:23.594254 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0703 07:26:23.595656 1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.596080 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.596296 1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.596506 1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.596718 1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.596922 1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.597222 1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.597494 1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.687555 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.687890 1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:23.688109 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0703 07:26:35.980836 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:26:35.980877 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-03 07:26:35.980871272 +0000 UTC m=+13.189563120" I0703 07:26:35.980818 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-03 07:26:35.980800004 +0000 UTC m=+13.189491859" I0703 07:26:35.992453 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:35.992500 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:26:35.992517 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-03 07:26:35.992510835 +0000 UTC m=+13.201202681" I0703 07:26:36.546934 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-03 07:26:36.546918795 +0000 UTC m=+13.755610645" I0703 07:26:37.488114 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:37.499703 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-03 07:26:37.499683709 +0000 UTC m=+14.708375559" I0703 07:26:37.588719 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:37.588701062 +0000 UTC m=+14.797392909" I0703 07:26:37.606910 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:37.60689637 +0000 UTC m=+14.815588218" I0703 07:26:37.691837 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:37.692431 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:37.692415531 +0000 UTC m=+14.901107389" I0703 07:26:37.788697 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:37.788744 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.532636 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.532618847 +0000 UTC m=+34.741310703" I0703 07:26:57.532684 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:26:57.532716 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-03 07:26:57.53271013 +0000 UTC m=+34.741401979" I0703 07:26:57.543464 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.543564 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.543555824 +0000 UTC m=+34.752247671" I0703 07:26:57.554654 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.571435 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-03 07:26:57.571418137 +0000 UTC m=+34.780109994" I0703 07:26:57.587513 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.587491308 +0000 UTC m=+34.796183154" I0703 07:26:57.587759 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.587735241 +0000 UTC m=+34.796427096" I0703 07:26:57.587864 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.587853656 +0000 UTC m=+34.796545574" I0703 07:26:57.588191 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.588177953 +0000 UTC m=+34.796869849" I0703 07:26:57.588495 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.588483063 +0000 UTC m=+34.797174909" I0703 07:26:57.596776 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.599699 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.599738 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:57.599704 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" E0703 07:26:57.936988 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 07:26:57.937062 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-03 07:26:57.937052657 +0000 UTC m=+35.145744503" E0703 07:26:57.937086 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 07:26:57.945951 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" E0703 07:26:57.946023 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 07:26:57.946047 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 07:26:57.946071 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" I0703 07:26:58.340883 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-03 07:26:58.34086874 +0000 UTC m=+35.549560590" I0703 07:26:58.351772 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:58.351757989 +0000 UTC m=+35.560449822" I0703 07:26:58.357460 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:58.357960 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:58.357950506 +0000 UTC m=+35.566642352" I0703 07:26:58.374313 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:58.374299873 +0000 UTC m=+35.582991721" I0703 07:26:58.374655 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:58.374642378 +0000 UTC m=+35.583334215" I0703 07:26:58.383882 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:26:58.384098 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:26:58.384087534 +0000 UTC m=+35.592779369" I0703 07:26:58.397592 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:08.052076 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" lastTransitionTime="2026-07-03 07:33:08.052059713 +0000 UTC m=+405.260751586" I0703 07:33:08.052111 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="dex/dex-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:33:08.052141 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Issuing" lastTransitionTime="2026-07-03 07:33:08.052135512 +0000 UTC m=+405.260827359" I0703 07:33:08.063717 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:08.063766 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="dex/dex-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:33:08.063789 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Issuing" lastTransitionTime="2026-07-03 07:33:08.063781377 +0000 UTC m=+405.272473230" I0703 07:33:08.409223 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:08.420842 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Approved" lastTransitionTime="2026-07-03 07:33:08.420827051 +0000 UTC m=+405.629518906" I0703 07:33:08.490748 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Ready" lastTransitionTime="2026-07-03 07:33:08.490732597 +0000 UTC m=+405.699424447" I0703 07:33:08.595611 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:33:08.595597473 +0000 UTC m=+405.804289311" I0703 07:33:08.606709 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:08.607224 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:33:08.607214541 +0000 UTC m=+405.815906376" I0703 07:33:08.619298 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:13.536738 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" lastTransitionTime="2026-07-03 07:33:13.536720214 +0000 UTC m=+410.745412064" I0703 07:33:13.536773 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="kind-registry/registry-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 07:33:13.536809 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Issuing" lastTransitionTime="2026-07-03 07:33:13.536802851 +0000 UTC m=+410.745494699" I0703 07:33:13.547221 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:13.547279 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" lastTransitionTime="2026-07-03 07:33:13.547271429 +0000 UTC m=+410.755963281" I0703 07:33:14.207774 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:14.298420 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="kind-registry/registry-cert-1" condition="Approved" lastTransitionTime="2026-07-03 07:33:14.29840633 +0000 UTC m=+411.507098180" I0703 07:33:14.311091 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="kind-registry/registry-cert-1" condition="Ready" lastTransitionTime="2026-07-03 07:33:14.311076892 +0000 UTC m=+411.519768726" I0703 07:33:14.339498 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-03 07:33:14.339482147 +0000 UTC m=+411.548173980" I0703 07:33:14.388028 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0703 07:33:14.420601 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again"