I0717 19:09:24.037624       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0717 19:09:24.042405       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0717 19:09:24.222064       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0717 19:09:24.222118       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0717 19:09:24.222136       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0717 19:09:24.223057       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0717 19:09:24.223068       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0717 19:09:24.223133       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0717 19:09:24.229841       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0717 19:09:24.230601       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0717 19:09:54.977920       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0717 19:09:54.984064       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0717 19:09:54.986531       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0717 19:09:54.991211       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0717 19:09:54.995998       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0717 19:09:55.003181       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0717 19:09:55.005453       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0717 19:09:55.007982       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0717 19:09:55.008010       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0717 19:09:55.008015       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0717 19:09:55.010594       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0717 19:09:55.015668       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0717 19:09:55.018281       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0717 19:09:55.020352       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0717 19:09:55.020372       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0717 19:09:55.020507       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0717 19:09:55.026142       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0717 19:09:55.032988       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0717 19:09:55.036669       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0717 19:09:55.040033       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0717 19:09:55.043171       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0717 19:09:55.046033       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0717 19:09:55.048060       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0717 19:09:55.048079       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0717 19:09:55.048755       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0717 19:09:55.052889       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.054344       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.056502       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.058639       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.059431       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.064451       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.066184       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.066937       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.074869       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.077823       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:09:55.084786       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0717 19:15:22.113920       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-17 19:15:22.113890755 +0000 UTC m=+360.570869749
I0717 19:15:22.116781       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 19:15:22.116851       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-17 19:15:22.116839882 +0000 UTC m=+360.573818876
I0717 19:15:22.155320       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:15:22.155445       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 19:15:22.155482       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-17 19:15:22.155470307 +0000 UTC m=+360.612449321
I0717 19:15:22.441304       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:15:22.493310       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-17 19:15:22.493283162 +0000 UTC m=+360.950262186
I0717 19:15:22.552930       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-17 19:15:22.552913087 +0000 UTC m=+361.009892081
I0717 19:15:22.599023       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:15:22.598932221 +0000 UTC m=+361.055911215
I0717 19:15:22.622110       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:15:22.624366       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:15:22.624353014 +0000 UTC m=+361.081332028
I0717 19:15:22.630820       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:15:22.763715       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:16:05.438830       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 19:16:05.438812358 +0000 UTC m=+403.895791352
I0717 19:16:05.439145       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 19:16:05.439184       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 19:16:05.439174146 +0000 UTC m=+403.896153140
I0717 19:16:05.464986       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:16:05.465068       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 19:16:05.465093       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 19:16:05.465085 +0000 UTC m=+403.922063984
I0717 19:16:05.746478       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-17 19:16:05.746457692 +0000 UTC m=+404.203436676
I0717 19:16:05.763111       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-17 19:16:05.763097133 +0000 UTC m=+404.220076107
I0717 19:16:05.793970       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:16:05.7939552 +0000 UTC m=+404.250934194
I0717 19:16:05.808088       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:16:05.810667       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:16:05.810655802 +0000 UTC m=+404.267634796
I0717 19:16:05.826939       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 19:16:05.828772       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"