I0701 20:02:00.129492 1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64" I0701 20:02:00.129622 1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0701 20:02:00.129899 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0701 20:02:00.129933 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0701 20:02:00.129941 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0701 20:02:00.129947 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0701 20:02:00.129953 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0701 20:02:00.203541 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0701 20:02:00.203575 1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0701 20:02:00.203587 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0701 20:02:00.204121 1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0701 20:02:00.204236 1 controller.go:182] "starting leader election" logger="cert-manager.controller" I0701 20:02:00.204281 1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0701 20:02:00.227873 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... I0701 20:02:00.313900 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0701 20:02:00.329345 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0701 20:02:00.332339 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0701 20:02:00.404240 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0701 20:02:00.527331 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders" I0701 20:02:00.530432 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges" I0701 20:02:00.533036 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0701 20:02:00.602469 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0701 20:02:00.627667 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0701 20:02:00.630822 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0701 20:02:00.727564 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0701 20:02:00.727600 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0701 20:02:00.727682 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0701 20:02:00.730500 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0701 20:02:00.730683 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers" I0701 20:02:00.800767 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0701 20:02:00.827060 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0701 20:02:00.830007 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0701 20:02:00.901695 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0701 20:02:00.901724 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0701 20:02:00.901733 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0701 20:02:00.901833 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0701 20:02:00.926255 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0701 20:02:01.027026 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0701 20:02:01.028710 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0701 20:02:01.101010 1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.101289 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.101806 1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.102026 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.102082 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.101810 1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.102482 1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.102032 1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.103064 1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.103725 1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:01.126353 1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0701 20:02:08.983109 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 20:02:08.983091173 +0000 UTC m=+9.181079589" I0701 20:02:08.983373 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 20:02:08.983426 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 20:02:08.983413708 +0000 UTC m=+9.181402104" I0701 20:02:08.997903 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:08.998002 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 20:02:08.99798925 +0000 UTC m=+9.195977666" I0701 20:02:09.548625 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:09.551824 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 20:02:09.551804142 +0000 UTC m=+9.749792538" I0701 20:02:09.726331 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-01 20:02:09.726297265 +0000 UTC m=+9.924285661" I0701 20:02:09.749650 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:09.749630562 +0000 UTC m=+9.947618958" I0701 20:02:09.828090 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:09.828073043 +0000 UTC m=+10.026061439" I0701 20:02:09.842658 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:09.926606 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:09.926584986 +0000 UTC m=+10.124573382" I0701 20:02:09.932046 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:09.942380 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:09.943038 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:09.943371 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:09.943355754 +0000 UTC m=+10.141344150" I0701 20:02:30.214442 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 20:02:30.214506 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-01 20:02:30.214498395 +0000 UTC m=+30.412486791" I0701 20:02:30.214458 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.214443224 +0000 UTC m=+30.412431620" I0701 20:02:30.225050 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:30.225174 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.225159813 +0000 UTC m=+30.423148209" I0701 20:02:30.242349 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:30.273901 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-01 20:02:30.273873385 +0000 UTC m=+30.471861791" I0701 20:02:30.324238 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.324164113 +0000 UTC m=+30.522152519" I0701 20:02:30.324806 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.324786473 +0000 UTC m=+30.522774869" I0701 20:02:30.326051 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.326037634 +0000 UTC m=+30.524026040" I0701 20:02:30.324178 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.324129612 +0000 UTC m=+30.522118008" I0701 20:02:30.326819 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 20:02:30.326792887 +0000 UTC m=+30.524781283" I0701 20:02:30.339354 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:30.339450 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:30.339705 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:30.339896 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" E0701 20:02:31.159086 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 20:02:31.159220 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-01 20:02:31.159171002 +0000 UTC m=+31.357159398" E0701 20:02:31.159258 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 20:02:31.169747 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" E0701 20:02:31.169872 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 20:02:31.169920 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 20:02:31.169960 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" I0701 20:02:31.539368 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-01 20:02:31.5393515 +0000 UTC m=+31.737339906" I0701 20:02:31.553352 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.553334123 +0000 UTC m=+31.751322519" I0701 20:02:31.560629 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:31.561431 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.561420038 +0000 UTC m=+31.759408444" I0701 20:02:31.634278 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.634240092 +0000 UTC m=+31.832228498" I0701 20:02:31.634692 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.634674449 +0000 UTC m=+31.832662845" I0701 20:02:31.646579 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:31.646962 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.646948334 +0000 UTC m=+31.844936730" I0701 20:02:31.734300 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:31.738504 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:02:31.738952 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:02:31.738941837 +0000 UTC m=+31.936930243" I0701 20:02:31.742009 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:06:55.954876 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="dex/dex-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 20:06:55.954953 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Issuing" lastTransitionTime="2026-07-01 20:06:55.954941429 +0000 UTC m=+296.152929825" I0701 20:06:55.954895 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" lastTransitionTime="2026-07-01 20:06:55.954880258 +0000 UTC m=+296.152868654" I0701 20:06:55.969746 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:06:55.969832 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" lastTransitionTime="2026-07-01 20:06:55.969821572 +0000 UTC m=+296.167809978" I0701 20:06:57.326532 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:06:57.359370 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Approved" lastTransitionTime="2026-07-01 20:06:57.359353538 +0000 UTC m=+297.557341934" I0701 20:06:57.430799 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Ready" lastTransitionTime="2026-07-01 20:06:57.430779073 +0000 UTC m=+297.628767469" I0701 20:06:57.538180 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:06:57.53816345 +0000 UTC m=+297.736151846" I0701 20:06:57.553047 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 20:06:57.553839 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 20:06:57.553827904 +0000 UTC m=+297.751816310" I0701 20:06:57.631373 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again"