I0716 15:15:08.484832       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0716 15:15:08.484981       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0716 15:15:08.506005       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0716 15:15:08.506042       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0716 15:15:08.506051       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0716 15:15:08.506495       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0716 15:15:08.506838       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0716 15:15:08.507027       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0716 15:15:08.509569       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0716 15:15:38.516839       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout
I0716 15:16:02.074471       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0716 15:16:02.078387       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0716 15:16:02.083424       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0716 15:16:02.085044       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0716 15:16:02.085079       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0716 15:16:02.085514       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0716 15:16:02.096660       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0716 15:16:02.100158       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0716 15:16:02.102761       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0716 15:16:02.102792       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0716 15:16:02.102795       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0716 15:16:02.106185       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0716 15:16:02.108820       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0716 15:16:02.112114       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0716 15:16:02.120634       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0716 15:16:02.124680       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0716 15:16:02.127343       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0716 15:16:02.127464       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0716 15:16:02.130026       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0716 15:16:02.132097       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0716 15:16:02.134010       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0716 15:16:02.135939       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0716 15:16:02.136094       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0716 15:16:02.138040       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0716 15:16:02.140920       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0716 15:16:02.149339       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.149486       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.150377       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.153450       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.154739       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.154776       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.156940       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.160449       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.165470       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.167479       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:16:02.167692       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0716 15:17:44.183802       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-16 15:17:44.183764688 +0000 UTC m=+155.745831403
I0716 15:17:44.184553       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:17:44.184587       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-16 15:17:44.184579255 +0000 UTC m=+155.746645980
I0716 15:17:44.211187       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:44.211309       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:17:44.211331       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-16 15:17:44.211322969 +0000 UTC m=+155.773389684
I0716 15:17:44.497166       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:44.521081       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-07-16 15:17:44.521058586 +0000 UTC m=+156.083125341
I0716 15:17:44.546281       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-07-16 15:17:44.5462703 +0000 UTC m=+156.108337015
I0716 15:17:44.582078       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:17:44.582055081 +0000 UTC m=+156.144121806
I0716 15:17:44.601190       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:44.602214       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:17:44.602203806 +0000 UTC m=+156.164270521
I0716 15:17:44.617739       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:44.619036       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:17:44.619018616 +0000 UTC m=+156.181085361
I0716 15:17:44.619706       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:46.812841       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-16 15:17:46.812819056 +0000 UTC m=+158.374885801
I0716 15:17:46.813344       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:17:46.813379       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-16 15:17:46.813372196 +0000 UTC m=+158.375438951
I0716 15:17:46.835037       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:46.835171       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-16 15:17:46.835158974 +0000 UTC m=+158.397225719
I0716 15:17:47.242459       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:47.281355       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Approved" to 2026-07-16 15:17:47.281338925 +0000 UTC m=+158.843405650
I0716 15:17:47.297883       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Ready" to 2026-07-16 15:17:47.297865569 +0000 UTC m=+158.859932284
I0716 15:17:47.320887       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:17:47.32087101 +0000 UTC m=+158.882937735
I0716 15:17:47.339393       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:17:47.381810       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:24:11.446458       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-16 15:24:11.44643037 +0000 UTC m=+543.008497115
I0716 15:24:11.446743       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:24:11.446823       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-16 15:24:11.446807887 +0000 UTC m=+543.008874642
I0716 15:24:11.460186       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:24:11.460408       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:24:11.460482       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-16 15:24:11.460472785 +0000 UTC m=+543.022539540
I0716 15:24:11.953861       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:24:11.974544       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-16 15:24:11.974522866 +0000 UTC m=+543.536589611
I0716 15:24:11.998937       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-16 15:24:11.998918083 +0000 UTC m=+543.560984808
I0716 15:24:12.032212       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:24:12.032191795 +0000 UTC m=+543.594258550
I0716 15:24:12.049312       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:24:12.050065       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:24:12.050053906 +0000 UTC m=+543.612120631
I0716 15:24:12.067398       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:25:01.572248       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0716 15:25:01.572327       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-16 15:25:01.572316453 +0000 UTC m=+593.134383198
I0716 15:25:01.572969       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-16 15:25:01.572960906 +0000 UTC m=+593.135027651
I0716 15:25:01.586221       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:25:01.586425       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-16 15:25:01.5864099 +0000 UTC m=+593.148476625
I0716 15:25:01.797691       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0716 15:25:01.832031       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-16 15:25:01.832015004 +0000 UTC m=+593.394081749
I0716 15:25:01.868709       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-16 15:25:01.868691651 +0000 UTC m=+593.430758376
I0716 15:25:01.896981       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 15:25:01.896965084 +0000 UTC m=+593.459031809
I0716 15:25:01.924153       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"