I0615 20:09:08.195951 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 20:09:08.196070 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 20:09:08.196161 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 20:09:08.201540 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 20:09:08.204344 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 20:09:08.204451 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 20:09:08.204573 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 20:09:08.207854 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... E0615 20:09:38.208959 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout E0615 20:10:37.752194 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout I0615 20:11:10.139847 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 20:11:10.143635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 20:11:10.144771 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 20:11:10.144808 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 20:11:10.144968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 20:11:10.149702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 20:11:10.153890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 20:11:10.156249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 20:11:10.158713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 20:11:10.164204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 20:11:10.166375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 20:11:10.168238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 20:11:10.170158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 20:11:10.172875 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 20:11:10.172937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 20:11:10.174755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 20:11:10.177812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 20:11:10.177836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 20:11:10.177845 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 20:11:10.177947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 20:11:10.179825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 20:11:10.181863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 20:11:10.183480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 20:11:10.190856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 20:11:10.195441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 20:11:10.201522 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.201986 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.202624 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.204144 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.206805 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.207496 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.207648 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.209856 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.218071 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:11:10.480966 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 20:16:34.614434 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-15 20:16:34.614385774 +0000 UTC m=+446.794891532 I0615 20:16:34.614634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:16:34.614898 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-15 20:16:34.614869054 +0000 UTC m=+446.795374812 I0615 20:16:34.678590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:16:34.678675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:16:34.678694 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-15 20:16:34.678686592 +0000 UTC m=+446.859192320 I0615 20:16:35.087868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:16:35.103390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-rqxxg" condition "Approved" to 2026-06-15 20:16:35.10336891 +0000 UTC m=+447.283874648 I0615 20:16:35.129717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-rqxxg" condition "Ready" to 2026-06-15 20:16:35.129702771 +0000 UTC m=+447.310208519 I0615 20:16:35.181614 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:16:35.181598837 +0000 UTC m=+447.362104575 I0615 20:16:35.215159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:17:30.621523 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 20:17:30.621500507 +0000 UTC m=+502.802006235 I0615 20:17:30.621555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:17:30.621619 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 20:17:30.621612799 +0000 UTC m=+502.802118527 I0615 20:17:30.642118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:17:30.642244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:17:30.642284 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 20:17:30.642275661 +0000 UTC m=+502.822781409 I0615 20:17:30.923165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cj7lc" condition "Approved" to 2026-06-15 20:17:30.923155965 +0000 UTC m=+503.103661683 I0615 20:17:30.962493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cj7lc" condition "Ready" to 2026-06-15 20:17:30.962480413 +0000 UTC m=+503.142986131 I0615 20:17:30.995330 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:17:30.995315653 +0000 UTC m=+503.175821391 I0615 20:17:31.037473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"