I0706 13:16:18.602449 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0706 13:16:18.602652 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0706 13:16:18.672581 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0706 13:16:18.672703 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0706 13:16:18.672720 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0706 13:16:18.673420 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0706 13:16:18.673863 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0706 13:16:18.673930 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0706 13:16:18.712095 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... E0706 13:16:18.713154 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0706 13:16:49.170352 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0706 13:16:49.170567 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0706 13:16:49.181135 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0706 13:16:49.188029 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0706 13:16:49.188350 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0706 13:16:49.199372 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0706 13:16:49.207987 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0706 13:16:49.217535 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0706 13:16:49.219827 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0706 13:16:49.219854 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0706 13:16:49.219915 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0706 13:16:49.226524 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0706 13:16:49.229039 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0706 13:16:49.234181 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0706 13:16:49.237876 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0706 13:16:49.245843 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0706 13:16:49.248418 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0706 13:16:49.251849 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0706 13:16:49.253767 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0706 13:16:49.256152 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0706 13:16:49.258426 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0706 13:16:49.260217 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0706 13:16:49.260238 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0706 13:16:49.260364 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0706 13:16:49.264890 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0706 13:16:49.271400 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.271911 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.282500 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.283995 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.285009 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.287134 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.289528 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.291327 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.302477 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.304739 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:16:49.306884 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0706 13:21:40.485993 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-06 13:21:40.485952446 +0000 UTC m=+322.947512165 I0706 13:21:40.486784 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 13:21:40.486980 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-06 13:21:40.486968939 +0000 UTC m=+322.948528668 I0706 13:21:40.510866 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:21:40.511054 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-06 13:21:40.511040982 +0000 UTC m=+322.972600751 I0706 13:21:40.895662 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:21:40.942252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-06 13:21:40.942239601 +0000 UTC m=+323.403799320 I0706 13:21:40.962985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-06 13:21:40.962967167 +0000 UTC m=+323.424526886 I0706 13:21:41.006187 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:21:41.006168761 +0000 UTC m=+323.467728480 I0706 13:21:41.024073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:21:41.024914 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:21:41.024904981 +0000 UTC m=+323.486464680 I0706 13:21:41.035981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:21:41.044609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:23.368270 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 13:22:23.368324 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-06 13:22:23.368317478 +0000 UTC m=+365.829877197 I0706 13:22:23.368668 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-06 13:22:23.368662816 +0000 UTC m=+365.830222535 I0706 13:22:23.384239 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:23.385977 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-06 13:22:23.385964293 +0000 UTC m=+365.847524042 I0706 13:22:23.542630 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:23.573850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-06 13:22:23.573840021 +0000 UTC m=+366.035399730 I0706 13:22:23.591027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-06 13:22:23.591016445 +0000 UTC m=+366.052576164 I0706 13:22:23.618078 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 13:22:23.618066977 +0000 UTC m=+366.079626706 I0706 13:22:23.631364 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 13:22:23.685094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" E0706 13:49:14.228434 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0706 13:49:26.822986 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0706 13:49:41.830157 1 leaderelection.go:340] Failed to update lock optimitically: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again, falling back to slow path