I0331 21:18:32.839475 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 21:18:32.839688 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 21:18:32.839753 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 21:18:32.844347 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 21:18:32.844685 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 21:18:32.848466 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 21:18:32.849484 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 21:18:32.849521 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 21:18:32.940664 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 21:18:32.946381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 21:18:32.961070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 21:18:32.963618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 21:18:32.965825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 21:18:32.967890 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 21:18:32.967927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 21:18:32.969547 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 21:18:32.969602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 21:18:33.004803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 21:18:33.011566 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 21:18:33.011610 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 21:18:33.014989 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 21:18:33.019495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 21:18:33.028777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 21:18:33.030741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 21:18:33.033319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 21:18:33.038686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 21:18:33.040493 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 21:18:33.042225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 21:18:33.043862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 21:18:33.044657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 21:18:33.050852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 21:18:33.055722 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 21:18:33.056252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 21:18:33.060270 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.061249 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.061676 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.063744 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.064354 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.064757 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.065082 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.068350 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.082508 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:33.341245 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:23:00.502538 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-31 21:23:00.502485602 +0000 UTC m=+267.762643515 I0331 21:23:00.506051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:00.506093 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 21:23:00.506082342 +0000 UTC m=+267.766240255 I0331 21:23:00.521324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:00.521448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:00.521501 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 21:23:00.521493839 +0000 UTC m=+267.781651742 I0331 21:23:00.767092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hrbkz" condition "Approved" to 2026-03-31 21:23:00.767082072 +0000 UTC m=+268.027239965 I0331 21:23:00.785737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-hrbkz" condition "Ready" to 2026-03-31 21:23:00.785714249 +0000 UTC m=+268.045872142 I0331 21:23:00.814056 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:00.814044169 +0000 UTC m=+268.074202062 I0331 21:23:00.834706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:00.835033 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:00.835027335 +0000 UTC m=+268.095185228 I0331 21:23:00.856658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:40.446050 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-31 21:23:40.446027514 +0000 UTC m=+307.706185427 I0331 21:23:40.446317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:40.446497 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-31 21:23:40.446476085 +0000 UTC m=+307.706633998 I0331 21:23:40.494605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:40.494932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:40.495069 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-31 21:23:40.495054541 +0000 UTC m=+307.755212464 I0331 21:23:40.687355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:40.699465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xclgh" condition "Approved" to 2026-03-31 21:23:40.699452809 +0000 UTC m=+307.959610702 I0331 21:23:40.733436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xclgh" condition "Ready" to 2026-03-31 21:23:40.733414319 +0000 UTC m=+307.993572232 I0331 21:23:40.828078 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:40.82806233 +0000 UTC m=+308.088220223 I0331 21:23:40.872580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:40.941502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"