I0708 10:17:24.303321       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0708 10:17:24.303422       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0708 10:17:24.303486       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0708 10:17:24.306200       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0708 10:17:24.306467       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0708 10:17:24.307459       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0708 10:17:24.308494       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0708 10:17:24.314293       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0708 10:17:26.701000       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0708 10:17:26.705952       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0708 10:17:26.714060       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0708 10:17:26.718254       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0708 10:17:26.720833       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0708 10:17:26.720877       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0708 10:17:26.720887       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0708 10:17:26.720897       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0708 10:17:26.720925       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0708 10:17:26.723091       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0708 10:17:26.725275       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0708 10:17:26.727597       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0708 10:17:26.729896       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0708 10:17:26.729943       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0708 10:17:26.738090       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0708 10:17:26.741149       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0708 10:17:26.743972       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0708 10:17:26.746209       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0708 10:17:26.748285       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0708 10:17:26.750468       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0708 10:17:26.751542       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0708 10:17:26.753394       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0708 10:17:26.758111       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0708 10:17:26.761691       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0708 10:17:26.763590       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0708 10:17:26.766364       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:26.778207       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:26.788410       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:27.062081       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.167015       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.172411       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.172919       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.173429       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.178221       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0708 10:17:28.199244       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
E0708 10:17:35.158156       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
E0708 10:17:35.250792       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{kube-prometheus-stack.18c0491e9b79ac89  default    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:kube-prometheus-stack,UID:943f564a-3c24-497a-947b-503e2d98a23d,APIVersion:cert-manager.io/v1,ResourceVersion:4258,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.245005449 +0000 UTC m=+4.011514757,LastTimestamp:2026-07-08 10:17:28.245005449 +0000 UTC m=+4.011514757,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}"
E0708 10:17:35.251706       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-api.18c0491e9b9651b7  openstack    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:openstack,Name:libvirt-api,UID:6e61fdf0-08b1-4f80-bc62-7921698e191f,APIVersion:cert-manager.io/v1,ResourceVersion:15421,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.246882743 +0000 UTC m=+4.013392061,LastTimestamp:2026-07-08 10:17:28.246882743 +0000 UTC m=+4.013392061,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}"
E0708 10:17:42.255918       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{atmosphere.18c0491e9b7a50b8  default    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:atmosphere,UID:5e7a7df1-0300-49c9-abf0-e0769791595d,APIVersion:cert-manager.io/v1,ResourceVersion:1311,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.24504748 +0000 UTC m=+4.011556818,LastTimestamp:2026-07-08 10:17:28.24504748 +0000 UTC m=+4.011556818,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}"
E0708 10:17:42.257899       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-vnc.18c0491e9b9822e2  openstack    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:openstack,Name:libvirt-vnc,UID:35c3ff57-b1a8-47e6-9bc1-9e34a03ad48b,APIVersion:cert-manager.io/v1,ResourceVersion:15415,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.247001826 +0000 UTC m=+4.013511134,LastTimestamp:2026-07-08 10:17:28.247001826 +0000 UTC m=+4.013511134,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}"
E0708 10:17:49.263087       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{octavia-server.18c0491e9b991991  openstack    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:openstack,Name:octavia-server,UID:2a080578-808f-4ab2-9485-c7be12035d87,APIVersion:cert-manager.io/v1,ResourceVersion:24673,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.247064977 +0000 UTC m=+4.013574285,LastTimestamp:2026-07-08 10:17:28.247064977 +0000 UTC m=+4.013574285,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}"
E0708 10:17:56.269893       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{octavia-client.18c0491e9b9972dd  openstack    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:openstack,Name:octavia-client,UID:f68f3990-4411-4b02-8351-f4816689ca88,APIVersion:cert-manager.io/v1,ResourceVersion:24659,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-07-08 10:17:28.247087837 +0000 UTC m=+4.013597135,LastTimestamp:2026-07-08 10:17:28.247087837 +0000 UTC m=+4.013597135,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}"
E0708 10:18:35.599771       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
I0708 10:28:36.022337       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-08 10:28:36.022267809 +0000 UTC m=+671.788777117
I0708 10:28:36.024573       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 10:28:36.024671       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-08 10:28:36.024661804 +0000 UTC m=+671.791171122
I0708 10:28:36.046212       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:28:36.046365       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 10:28:36.046396       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-08 10:28:36.046387036 +0000 UTC m=+671.812896344
I0708 10:28:36.317029       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-np69l" condition "Approved" to 2026-07-08 10:28:36.317019515 +0000 UTC m=+672.083528813
I0708 10:28:36.349850       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-np69l" condition "Ready" to 2026-07-08 10:28:36.349837043 +0000 UTC m=+672.116346351
I0708 10:28:36.393859       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:28:36.393845049 +0000 UTC m=+672.160354347
I0708 10:28:36.416780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:29:18.263963       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 10:29:18.263953567 +0000 UTC m=+714.030462855
I0708 10:29:18.264515       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 10:29:18.264565       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 10:29:18.264561231 +0000 UTC m=+714.031070519
I0708 10:29:18.283047       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:29:18.283312       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 10:29:18.283336       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 10:29:18.283330195 +0000 UTC m=+714.049839503
I0708 10:29:18.598477       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-v5jhb" condition "Approved" to 2026-07-08 10:29:18.598463602 +0000 UTC m=+714.364972910
I0708 10:29:18.626827       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-v5jhb" condition "Ready" to 2026-07-08 10:29:18.626815246 +0000 UTC m=+714.393324554
I0708 10:29:18.662683       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:29:18.662668664 +0000 UTC m=+714.429177982
I0708 10:29:18.706275       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:29:18.706569       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:29:18.706562057 +0000 UTC m=+714.473071355
I0708 10:29:18.735091       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"