I0529 22:52:03.791934       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0529 22:52:03.792016       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0529 22:52:03.792069       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0529 22:52:03.795099       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0529 22:52:03.795558       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0529 22:52:03.795621       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0529 22:52:03.795661       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0529 22:52:03.800557       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0529 22:52:03.801111       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0529 22:52:26.257100       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0529 22:52:26.261630       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0529 22:52:26.266704       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0529 22:52:26.269200       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0529 22:52:26.271556       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0529 22:52:26.273856       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0529 22:52:26.276403       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0529 22:52:26.276478       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0529 22:52:26.279722       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0529 22:52:26.281616       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0529 22:52:26.286110       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0529 22:52:26.288266       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0529 22:52:26.288285       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0529 22:52:26.288450       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0529 22:52:26.290287       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0529 22:52:26.291933       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0529 22:52:26.293709       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0529 22:52:26.295307       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0529 22:52:26.297254       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0529 22:52:26.298740       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0529 22:52:26.298761       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0529 22:52:26.298768       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0529 22:52:26.299084       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0529 22:52:26.300753       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0529 22:52:26.303299       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0529 22:52:26.305389       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.308030       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.310622       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.332548       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.344597       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.377589       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.409614       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.419526       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.422952       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:52:26.566389       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 22:56:40.362352       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-29 22:56:40.362314305 +0000 UTC m=+276.806308756
I0529 22:56:40.362678       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 22:56:40.362740       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-29 22:56:40.362733446 +0000 UTC m=+276.806727887
I0529 22:56:40.386175       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:56:40.386272       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-29 22:56:40.386266468 +0000 UTC m=+276.830260909
I0529 22:56:40.640310       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:56:40.710431       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-p2hhw" condition "Approved" to 2026-05-29 22:56:40.710410729 +0000 UTC m=+277.154405170
I0529 22:56:40.774700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-p2hhw" condition "Ready" to 2026-05-29 22:56:40.774687654 +0000 UTC m=+277.218682115
I0529 22:56:40.818817       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 22:56:40.818807697 +0000 UTC m=+277.262802138
I0529 22:56:40.849028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:57:17.422157       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 22:57:17.422135258 +0000 UTC m=+313.866129719
I0529 22:57:17.422180       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 22:57:17.422242       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 22:57:17.42222938 +0000 UTC m=+313.866223841
I0529 22:57:17.476721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:57:17.476899       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 22:57:17.476953       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 22:57:17.476937876 +0000 UTC m=+313.920932347
I0529 22:57:17.740487       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dtnlf" condition "Approved" to 2026-05-29 22:57:17.74045881 +0000 UTC m=+314.184453281
I0529 22:57:17.758038       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dtnlf" condition "Ready" to 2026-05-29 22:57:17.758025769 +0000 UTC m=+314.202020210
I0529 22:57:17.797052       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 22:57:17.797030142 +0000 UTC m=+314.241024583
I0529 22:57:17.831489       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:57:17.831836       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 22:57:17.831827902 +0000 UTC m=+314.275822343
I0529 22:57:17.854659       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0529 22:57:17.854871       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 22:57:17.854863694 +0000 UTC m=+314.298858125