I0623 19:40:25.890487 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0623 19:40:25.890615 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0623 19:40:25.890689 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0623 19:40:25.896131 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0623 19:40:25.896836 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0623 19:40:25.896907 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0623 19:40:25.896950 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0623 19:40:25.899336 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0623 19:40:25.989718 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0623 19:40:25.997797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0623 19:40:25.999157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0623 19:40:26.000836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0623 19:40:26.003341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0623 19:40:26.003387 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0623 19:40:26.004969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0623 19:40:26.009090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0623 19:40:26.012741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0623 19:40:26.014357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0623 19:40:26.016066 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0623 19:40:26.016086 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0623 19:40:26.016141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0623 19:40:26.018036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0623 19:40:26.019720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0623 19:40:26.021702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0623 19:40:26.024042 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0623 19:40:26.030243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0623 19:40:26.032653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0623 19:40:26.034837 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0623 19:40:26.034883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0623 19:40:26.037665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0623 19:40:26.039847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0623 19:40:26.043185 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0623 19:40:26.043214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0623 19:40:26.045918 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.047870 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.048935 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.049911 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.050095 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.051911 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.052375 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.066899 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.074050 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:40:26.287859 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 19:45:56.697251 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-23 19:45:56.697235386 +0000 UTC m=+330.848106736 I0623 19:45:56.698223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 19:45:56.698337 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-23 19:45:56.698325212 +0000 UTC m=+330.849196612 I0623 19:45:56.739137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:45:56.739283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 19:45:56.739306 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-23 19:45:56.739299342 +0000 UTC m=+330.890170702 I0623 19:45:57.214162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:45:57.222940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-tzs47" condition "Approved" to 2026-06-23 19:45:57.222925448 +0000 UTC m=+331.373796818 I0623 19:45:57.245737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-tzs47" condition "Ready" to 2026-06-23 19:45:57.245726398 +0000 UTC m=+331.396597768 I0623 19:45:57.273358 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 19:45:57.273347412 +0000 UTC m=+331.424218782 I0623 19:45:57.309057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:45:57.357090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:46:35.655149 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-23 19:46:35.655125361 +0000 UTC m=+369.805996741 I0623 19:46:35.655382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 19:46:35.655493 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-23 19:46:35.655481859 +0000 UTC m=+369.806353249 I0623 19:46:35.676419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:46:35.676548 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-23 19:46:35.676539338 +0000 UTC m=+369.827410708 I0623 19:46:35.880634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:46:35.913947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c79p5" condition "Approved" to 2026-06-23 19:46:35.913936591 +0000 UTC m=+370.064807961 I0623 19:46:35.940036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c79p5" condition "Ready" to 2026-06-23 19:46:35.940024019 +0000 UTC m=+370.090895389 I0623 19:46:35.976489 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 19:46:35.976477992 +0000 UTC m=+370.127349362 I0623 19:46:35.997243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:46:35.997673 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 19:46:35.997666634 +0000 UTC m=+370.148538004 I0623 19:46:36.004000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 19:46:36.020980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"