I0505 23:14:21.069867 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0505 23:14:21.069981 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0505 23:14:21.070045 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 23:14:21.074087 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0505 23:14:21.074452 1 controller.go:156] "cert-manager/controller: starting leader election" I0505 23:14:21.074551 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0505 23:14:21.074644 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0505 23:14:21.076716 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... E0505 23:14:51.078236 1 leaderelection.go:327] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout E0505 23:15:41.785368 1 leaderelection.go:327] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout I0505 23:16:12.477663 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0505 23:16:12.485784 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0505 23:16:12.485817 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0505 23:16:12.485828 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0505 23:16:12.485839 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0505 23:16:12.485846 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0505 23:16:12.488085 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0505 23:16:12.489934 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0505 23:16:12.491566 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0505 23:16:12.493539 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0505 23:16:12.495298 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0505 23:16:12.497409 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0505 23:16:12.503100 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0505 23:16:12.506772 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0505 23:16:12.510130 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0505 23:16:12.512150 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0505 23:16:12.513790 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0505 23:16:12.515622 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0505 23:16:12.517309 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0505 23:16:12.517391 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0505 23:16:12.519138 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0505 23:16:12.520845 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0505 23:16:12.521026 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0505 23:16:12.522758 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0505 23:16:12.528560 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0505 23:20:19.156006 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 23:20:19.156415 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-05 23:20:19.156042708 +0000 UTC m=+358.137193112 I0505 23:20:19.156414 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-05 23:20:19.154238647 +0000 UTC m=+358.135389071 I0505 23:20:19.200830 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:19.200942 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-05 23:20:19.2009316 +0000 UTC m=+358.182082034 I0505 23:20:19.512921 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:19.574108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hdj6b" condition "Approved" to 2026-05-05 23:20:19.574096057 +0000 UTC m=+358.555246461 I0505 23:20:19.595202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hdj6b" condition "Ready" to 2026-05-05 23:20:19.595192761 +0000 UTC m=+358.576343155 I0505 23:20:19.641342 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 23:20:19.641330081 +0000 UTC m=+358.622480475 I0505 23:20:19.682162 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:56.980622 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 23:20:56.980669 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 23:20:56.98065965 +0000 UTC m=+395.961810054 I0505 23:20:56.980889 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 23:20:56.980864755 +0000 UTC m=+395.962015179 I0505 23:20:57.000301 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:57.000495 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 23:20:57.000483667 +0000 UTC m=+395.981634121 I0505 23:20:57.273417 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:57.317950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-clgmw" condition "Approved" to 2026-05-05 23:20:57.317927458 +0000 UTC m=+396.299077862 I0505 23:20:57.339629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-clgmw" condition "Ready" to 2026-05-05 23:20:57.339615787 +0000 UTC m=+396.320766181 I0505 23:20:57.372293 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 23:20:57.372280373 +0000 UTC m=+396.353430777 I0505 23:20:57.389816 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:57.390328 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 23:20:57.390321099 +0000 UTC m=+396.371471503 I0505 23:20:57.409024 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 23:20:57.409692 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 23:20:57.409683705 +0000 UTC m=+396.390834109