I0714 23:56:36.034695 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0714 23:56:36.034829 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 23:56:36.034974 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 23:56:36.039800 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 23:56:36.040361 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0714 23:56:36.044332 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 23:56:36.044854 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 23:56:36.044904 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 23:56:36.322311 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 23:56:36.328210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 23:56:36.329804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0714 23:56:36.339988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 23:56:36.340031 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 23:56:36.340041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 23:56:36.341407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 23:56:36.346949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 23:56:36.359268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 23:56:36.366790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 23:56:36.371681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 23:56:36.374182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 23:56:36.374429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 23:56:36.375718 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 23:56:36.375740 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 23:56:36.377465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 23:56:36.380385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 23:56:36.386585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 23:56:36.408480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 23:56:36.414251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 23:56:36.416957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 23:56:36.419307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 23:56:36.421269 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 23:56:36.421334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 23:56:36.424087 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 23:56:36.426276 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.428058 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.430351 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.508766 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.515321 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.545291 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.683095 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.686925 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.775172 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:56:36.776719 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 E0714 23:57:02.937529 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0714 23:57:02.938666 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{kube-prometheus-stack.18c24d4d538f9e33 default 27376 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:kube-prometheus-stack,UID:aef44ade-e2d2-4060-962f-60c192b024ff,APIVersion:cert-manager.io/v1,ResourceVersion:4097,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-07-14 23:56:36 +0000 UTC,LastTimestamp:2026-07-14 23:56:41.777953022 +0000 UTC m=+5.835824210,Count:2,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}" I0715 00:02:11.790714 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-15 00:02:11.790688522 +0000 UTC m=+335.848559700 I0715 00:02:11.793277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 00:02:11.793394 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-15 00:02:11.793376803 +0000 UTC m=+335.851247991 I0715 00:02:11.859976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:11.860155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 00:02:11.860185 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-15 00:02:11.860177006 +0000 UTC m=+335.918048174 I0715 00:02:13.120962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:13.121831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hbpkn" condition "Approved" to 2026-07-15 00:02:13.121823424 +0000 UTC m=+337.179694582 I0715 00:02:13.166566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hbpkn" condition "Ready" to 2026-07-15 00:02:13.166552414 +0000 UTC m=+337.224423592 I0715 00:02:13.269164 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 00:02:13.269144191 +0000 UTC m=+337.327015349 I0715 00:02:13.311994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:13.312406 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 00:02:13.312399008 +0000 UTC m=+337.370270176 I0715 00:02:13.438037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:13.483435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:53.443863 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-15 00:02:53.443847662 +0000 UTC m=+377.501718840 I0715 00:02:53.444292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 00:02:53.444332 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-15 00:02:53.444327843 +0000 UTC m=+377.502199011 I0715 00:02:53.463545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:53.463690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 00:02:53.463728 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-15 00:02:53.463721015 +0000 UTC m=+377.521592183 I0715 00:02:54.055907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rqr58" condition "Approved" to 2026-07-15 00:02:54.055893978 +0000 UTC m=+378.113765146 I0715 00:02:54.083538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rqr58" condition "Ready" to 2026-07-15 00:02:54.083526288 +0000 UTC m=+378.141397446 I0715 00:02:54.174183 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 00:02:54.174162194 +0000 UTC m=+378.232033392 I0715 00:02:54.217748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 00:02:54.218374 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 00:02:54.218363223 +0000 UTC m=+378.276234391 I0715 00:02:54.254301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"