I0414 12:58:35.398959 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 12:58:35.399133 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 12:58:35.399207 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 12:58:35.403791 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 12:58:35.404431 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 12:58:35.409289 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 12:58:35.409289 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 12:58:35.415785 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 12:58:35.430844 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 12:58:35.436884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 12:58:35.440287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 12:58:35.442972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 12:58:35.445699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 12:58:35.451741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 12:58:35.456589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 12:58:35.458713 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 12:58:35.458745 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 12:58:35.458753 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 12:58:35.458826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 12:58:35.461124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 12:58:35.462907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 12:58:35.464914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 12:58:35.466955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 12:58:35.474560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 12:58:35.481038 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 12:58:35.483737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 12:58:35.486201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 12:58:35.488387 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 12:58:35.488424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 12:58:35.488500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 12:58:35.490529 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 12:58:35.490573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 12:58:35.492500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 12:58:35.494579 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.495312 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.495473 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.495803 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.512609 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.521334 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.523606 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.530459 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.782573 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:58:35.817231 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:05:32.364386 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-14 13:05:32.364372478 +0000 UTC m=+416.998622097 I0414 13:05:32.364983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:05:32.365025 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 13:05:32.365018978 +0000 UTC m=+416.999268597 I0414 13:05:32.381827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:05:32.381968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:05:32.381985 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 13:05:32.381980726 +0000 UTC m=+417.016230345 I0414 13:05:32.680300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-4bjxb" condition "Approved" to 2026-04-14 13:05:32.680288135 +0000 UTC m=+417.314537764 I0414 13:05:32.703832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-4bjxb" condition "Ready" to 2026-04-14 13:05:32.703819321 +0000 UTC m=+417.338068950 I0414 13:05:32.736124 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:05:32.736109465 +0000 UTC m=+417.370359094 I0414 13:05:32.774995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:05:32.775487 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:05:32.775479903 +0000 UTC m=+417.409729542 I0414 13:05:32.793183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:05:32.795103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:05:32.795444 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:05:32.795437226 +0000 UTC m=+417.429686845 I0414 13:06:13.104715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:06:13.104759 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 13:06:13.104749934 +0000 UTC m=+457.738999563 I0414 13:06:13.104952 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 13:06:13.10493111 +0000 UTC m=+457.739180769 I0414 13:06:13.122789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:06:13.123316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:06:13.123400 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 13:06:13.123389705 +0000 UTC m=+457.757639344 I0414 13:06:13.333182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:06:13.345977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4h6sr" condition "Approved" to 2026-04-14 13:06:13.345964303 +0000 UTC m=+457.980213962 I0414 13:06:13.366586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4h6sr" condition "Ready" to 2026-04-14 13:06:13.366576016 +0000 UTC m=+458.000825625 I0414 13:06:13.410582 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:06:13.410565151 +0000 UTC m=+458.044814800 I0414 13:06:13.436895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:06:13.437465 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:06:13.437437083 +0000 UTC m=+458.071686712 I0414 13:06:13.467902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:06:13.468153 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:06:13.468146177 +0000 UTC m=+458.102395796