I0402 09:54:57.046932 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 09:54:57.047060 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 09:54:57.047137 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 09:54:57.049955 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 09:54:57.050331 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 09:54:57.050791 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 09:54:57.050950 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 09:54:57.052644 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 09:54:57.101995 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 09:54:57.147070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 09:54:57.155856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 09:54:57.156360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 09:54:57.158432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 09:54:57.168421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 09:54:57.168724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 09:54:57.168792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 09:54:57.180014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 09:54:57.180491 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 09:54:57.180514 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 09:54:57.180826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 09:54:57.184375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 09:54:57.191636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 09:54:57.192061 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 09:54:57.192083 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 09:54:57.192494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 09:54:57.203102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 09:54:57.212411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 09:54:57.212491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 09:54:57.212531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 09:54:57.214705 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 09:54:57.217378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 09:54:57.217426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 09:54:57.217458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 09:54:57.223800 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.225212 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.225431 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.226068 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.227049 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.227757 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.232554 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.233217 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.252857 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 09:54:57.598548 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 10:00:22.495516 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-02 10:00:22.495495568 +0000 UTC m=+325.512365857 I0402 10:00:22.498172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 10:00:22.498285 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-02 10:00:22.498272279 +0000 UTC m=+325.515142558 I0402 10:00:22.518414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:00:22.518549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 10:00:22.518590 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-02 10:00:22.518583297 +0000 UTC m=+325.535453546 I0402 10:00:22.704631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:00:22.716248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-v2s9t" condition "Approved" to 2026-04-02 10:00:22.716236904 +0000 UTC m=+325.733107163 I0402 10:00:22.739255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-v2s9t" condition "Ready" to 2026-04-02 10:00:22.739233829 +0000 UTC m=+325.756104088 I0402 10:00:22.772927 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:00:22.772913696 +0000 UTC m=+325.789783955 I0402 10:00:22.801030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:00:22.801325 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:00:22.801318259 +0000 UTC m=+325.818188508 I0402 10:00:22.829039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:00:22.829606 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:00:22.829595828 +0000 UTC m=+325.846466087 I0402 10:00:22.833762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:01:05.429465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 10:01:05.429560 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-02 10:01:05.429550036 +0000 UTC m=+368.446420305 I0402 10:01:05.429785 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 10:01:05.429752831 +0000 UTC m=+368.446623120 I0402 10:01:05.466785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:01:05.466875 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 10:01:05.466867706 +0000 UTC m=+368.483737965 I0402 10:01:05.639066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:01:05.678416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zxsw8" condition "Approved" to 2026-04-02 10:01:05.678400456 +0000 UTC m=+368.695270715 I0402 10:01:05.697396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zxsw8" condition "Ready" to 2026-04-02 10:01:05.69737812 +0000 UTC m=+368.714248379 I0402 10:01:05.729163 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:01:05.729147717 +0000 UTC m=+368.746017966 I0402 10:01:05.756616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:01:05.757069 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:01:05.757058737 +0000 UTC m=+368.773929026 I0402 10:01:05.777587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 10:01:05.777833 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 10:01:05.777826666 +0000 UTC m=+368.794696915