I0706 13:15:53.037009 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0706 13:15:53.092769 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0706 13:15:53.529632 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0706 13:15:53.529734 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0706 13:15:53.529776 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0706 13:15:53.533366 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0706 13:15:53.533368 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0706 13:15:53.533401 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0706 13:15:53.611914 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... E0706 13:15:53.616705 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0706 13:16:11.774979 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0706 13:16:11.832527 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0706 13:16:11.836591 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0706 13:16:11.844169 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0706 13:16:11.847614 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0706 13:16:11.855162 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0706 13:16:11.855239 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0706 13:16:11.855245 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0706 13:16:11.855328 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0706 13:16:11.885086 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0706 13:16:11.888197 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0706 13:16:11.889730 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0706 13:16:11.893919 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0706 13:16:11.898432 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0706 13:16:11.899439 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0706 13:16:11.901906 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0706 13:16:11.908248 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0706 13:16:11.911796 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0706 13:16:11.911845 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0706 13:16:11.914336 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0706 13:16:11.916141 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0706 13:16:11.917921 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0706 13:16:11.919771 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0706 13:16:11.921347 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0706 13:16:11.926701 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0706 13:16:11.932941 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:11.940756 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:11.941786 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:11.942416 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:11.956023 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.004491 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.117153 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.118284 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.119182 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.125234 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:12.154077 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:22:34.150182 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-06 13:22:34.150154957 +0000 UTC m=+403.369657404 I0706 13:22:34.151018 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 13:22:34.151068 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-06 13:22:34.151062547 +0000 UTC m=+403.370564964 I0706 13:22:34.174661 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:34.174816 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-06 13:22:34.174806407 +0000 UTC m=+403.394308864 I0706 13:22:34.246339 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:34.298283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-06 13:22:34.298272109 +0000 UTC m=+403.517774526 I0706 13:22:34.325986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-06 13:22:34.325973108 +0000 UTC m=+403.545475525 I0706 13:22:34.352183 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:22:34.352174563 +0000 UTC m=+403.571676970 I0706 13:22:34.375491 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:34.376296 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:22:34.37628579 +0000 UTC m=+403.595788207 I0706 13:22:34.380888 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:34.394156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:23:17.797388 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-06 13:23:17.797367911 +0000 UTC m=+447.016870368 I0706 13:23:17.797977 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 13:23:17.798007 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-06 13:23:17.798000485 +0000 UTC m=+447.017502912 I0706 13:23:17.811157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:23:17.811358 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 13:23:17.811402 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-06 13:23:17.811390249 +0000 UTC m=+447.030892696 I0706 13:23:18.327918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-06 13:23:18.327905463 +0000 UTC m=+447.547407880 I0706 13:23:18.345392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-06 13:23:18.34538132 +0000 UTC m=+447.564883737 I0706 13:23:18.374734 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:23:18.374715906 +0000 UTC m=+447.594218333 I0706 13:23:18.394020 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:23:18.436498 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" E0706 13:49:09.473054 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path