I0713 22:01:37.087226 1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64" I0713 22:01:37.087315 1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0713 22:01:37.087493 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0713 22:01:37.087512 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0713 22:01:37.087516 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0713 22:01:37.087521 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0713 22:01:37.087524 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0713 22:01:37.090312 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0713 22:01:37.090334 1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0713 22:01:37.090341 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0713 22:01:37.090717 1 controller.go:182] "starting leader election" logger="cert-manager.controller" I0713 22:01:37.090796 1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0713 22:01:37.090880 1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0713 22:01:37.150601 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... I0713 22:01:37.160982 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0713 22:01:37.186688 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0713 22:01:37.251098 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders" I0713 22:01:37.252457 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0713 22:01:37.287204 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0713 22:01:37.288828 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0713 22:01:37.290400 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0713 22:01:37.290417 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0713 22:01:37.290524 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0713 22:01:37.292279 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0713 22:01:37.292294 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0713 22:01:37.292306 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0713 22:01:37.292414 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0713 22:01:37.294328 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges" I0713 22:01:37.388310 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0713 22:01:37.389921 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0713 22:01:37.391489 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers" I0713 22:01:37.393123 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0713 22:01:37.451695 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0713 22:01:37.487369 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0713 22:01:37.489283 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0713 22:01:37.586297 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0713 22:01:37.587339 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0713 22:01:37.587469 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0713 22:01:37.589482 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0713 22:01:37.590893 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.591044 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.591254 1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.591347 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.591458 1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.650945 1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.651354 1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.651609 1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.685920 1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.686142 1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:37.686166 1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0713 22:01:42.241530 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:01:42.241529 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-13 22:01:42.241519243 +0000 UTC m=+5.390482286" I0713 22:01:42.241569 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-13 22:01:42.241562714 +0000 UTC m=+5.390525767" I0713 22:01:42.253747 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:42.253804 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:01:42.253823 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-13 22:01:42.253816178 +0000 UTC m=+5.402779221" I0713 22:01:42.290504 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-13 22:01:42.290487075 +0000 UTC m=+5.439450108" I0713 22:01:42.771501 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:42.783423 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-13 22:01:42.783410441 +0000 UTC m=+5.932373474" I0713 22:01:42.865305 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-13 22:01:42.865287481 +0000 UTC m=+6.014250524" I0713 22:01:42.951578 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:01:42.951559695 +0000 UTC m=+6.100522738" I0713 22:01:42.963700 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:42.964253 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:01:42.964245729 +0000 UTC m=+6.113208772" I0713 22:01:42.974128 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:43.050920 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:57.427678 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:01:57.427707 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-13 22:01:57.427689408 +0000 UTC m=+20.576652451" I0713 22:01:57.427771 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-13 22:01:57.42776253 +0000 UTC m=+20.576725573" I0713 22:01:57.443548 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:57.443597 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:01:57.443619 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-13 22:01:57.443606109 +0000 UTC m=+20.592569142" E0713 22:01:57.461863 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0713 22:01:57.461942 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-13 22:01:57.461933508 +0000 UTC m=+20.610896551" E0713 22:01:57.461971 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0713 22:01:57.470999 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" E0713 22:01:57.471246 1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0713 22:01:57.471312 1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0713 22:01:57.471343 1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller" I0713 22:01:57.488635 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:01:57.494986 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-13 22:01:57.494974819 +0000 UTC m=+20.643937862" I0713 22:01:57.495273 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-13 22:01:57.495267136 +0000 UTC m=+20.644230169" I0713 22:01:57.551989 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-13 22:01:57.551978843 +0000 UTC m=+20.700941886" I0713 22:01:57.661442 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:01:57.661425022 +0000 UTC m=+20.810388065" I0713 22:01:57.685854 1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:01:57.685834216 +0000 UTC m=+20.834797259" I0713 22:01:57.691966 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:05.506508 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" lastTransitionTime="2026-07-13 22:04:05.506489366 +0000 UTC m=+148.655452399" I0713 22:04:05.506648 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="dex/dex-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:04:05.506684 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Issuing" lastTransitionTime="2026-07-13 22:04:05.506677112 +0000 UTC m=+148.655640145" I0713 22:04:05.517784 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:05.517847 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="dex/dex-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:04:05.517865 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="dex/dex-cert" condition="Issuing" lastTransitionTime="2026-07-13 22:04:05.517858637 +0000 UTC m=+148.666821680" I0713 22:04:05.811320 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:05.886171 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Approved" lastTransitionTime="2026-07-13 22:04:05.886154533 +0000 UTC m=+149.035117576" I0713 22:04:05.904589 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="dex/dex-cert-1" condition="Ready" lastTransitionTime="2026-07-13 22:04:05.904576049 +0000 UTC m=+149.053539082" I0713 22:04:05.993860 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:04:05.993845117 +0000 UTC m=+149.142808160" I0713 22:04:06.012249 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:06.012756 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="dex/dex-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:04:06.012746707 +0000 UTC m=+149.161709760" I0713 22:04:06.050846 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"dex-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:06.174883 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" lastTransitionTime="2026-07-13 22:04:06.174866914 +0000 UTC m=+149.323829957" I0713 22:04:06.174921 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="kind-registry/registry-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:04:06.174963 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Issuing" lastTransitionTime="2026-07-13 22:04:06.174955897 +0000 UTC m=+149.323918950" I0713 22:04:06.191329 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:06.191442 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="kind-registry/registry-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:04:06.191467 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Issuing" lastTransitionTime="2026-07-13 22:04:06.191461627 +0000 UTC m=+149.340424670" I0713 22:04:07.003883 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="kind-registry/registry-cert-1" condition="Approved" lastTransitionTime="2026-07-13 22:04:07.003857845 +0000 UTC m=+150.152820888" I0713 22:04:07.012841 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="kind-registry/registry-cert-1" condition="Ready" lastTransitionTime="2026-07-13 22:04:07.012828066 +0000 UTC m=+150.161791099" I0713 22:04:07.093693 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:04:07.093676788 +0000 UTC m=+150.242639831" I0713 22:04:07.106510 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:04:07.107592 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="kind-registry/registry-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:04:07.107583113 +0000 UTC m=+150.256546146" I0713 22:04:07.124703 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"registry-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:05:03.789987 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="quay/quay-cert" condition="Ready" lastTransitionTime="2026-07-13 22:05:03.789968911 +0000 UTC m=+206.938931944" I0713 22:05:03.790043 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="quay/quay-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 22:05:03.790066 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="quay/quay-cert" condition="Issuing" lastTransitionTime="2026-07-13 22:05:03.790059924 +0000 UTC m=+206.939022957" I0713 22:05:03.803200 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"quay-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:05:03.803308 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="quay/quay-cert" condition="Ready" lastTransitionTime="2026-07-13 22:05:03.803301769 +0000 UTC m=+206.952264802" I0713 22:05:05.001500 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"quay-cert\": the object has been modified; please apply your changes to the latest version and try again" I0713 22:05:05.020787 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="quay/quay-cert-1" condition="Approved" lastTransitionTime="2026-07-13 22:05:05.020770696 +0000 UTC m=+208.169733749" I0713 22:05:05.087333 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="quay/quay-cert-1" condition="Ready" lastTransitionTime="2026-07-13 22:05:05.087316769 +0000 UTC m=+208.236279802" I0713 22:05:05.186610 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="quay/quay-cert" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-13 22:05:05.186595585 +0000 UTC m=+208.335558618" I0713 22:05:05.250802 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"quay-cert\": the object has been modified; please apply your changes to the latest version and try again"