I0331 06:00:06.209031       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0331 06:00:06.209191       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0331 06:00:06.209280       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0331 06:00:06.213315       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0331 06:00:06.213820       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0331 06:00:06.213897       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0331 06:00:06.213906       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0331 06:00:06.218329       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0331 06:00:06.220149       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
E0331 06:00:26.623052       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
E0331 06:00:53.597827       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0331 06:01:19.615627       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0331 06:01:19.618394       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0331 06:01:19.625798       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0331 06:01:19.629732       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0331 06:01:19.632814       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0331 06:01:19.634893       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0331 06:01:19.638385       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0331 06:01:19.642597       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0331 06:01:19.646146       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0331 06:01:19.646177       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0331 06:01:19.646271       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0331 06:01:19.648462       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0331 06:01:19.650990       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0331 06:01:19.651043       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0331 06:01:19.654913       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0331 06:01:19.657134       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0331 06:01:19.660198       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0331 06:01:19.663092       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0331 06:01:19.666274       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0331 06:01:19.679432       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0331 06:01:19.688410       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0331 06:01:19.688655       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0331 06:01:19.691735       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0331 06:01:19.691889       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0331 06:01:19.703657       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0331 06:01:19.710525       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:19.710889       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:19.711967       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:20.053942       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.765573       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.780960       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.826607       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.876787       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.877970       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:01:24.882391       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0331 06:07:05.353900       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-31 06:07:05.35388251 +0000 UTC m=+419.181976854
I0331 06:07:05.355131       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 06:07:05.355203       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 06:07:05.355194771 +0000 UTC m=+419.183289115
I0331 06:07:05.372374       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:05.372549       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 06:07:05.372585       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 06:07:05.372576254 +0000 UTC m=+419.200670618
I0331 06:07:05.565435       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-jrhmg" condition "Approved" to 2026-03-31 06:07:05.565418923 +0000 UTC m=+419.393513267
I0331 06:07:05.589745       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-jrhmg" condition "Ready" to 2026-03-31 06:07:05.589732192 +0000 UTC m=+419.417826536
I0331 06:07:05.621274       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 06:07:05.621256978 +0000 UTC m=+419.449351322
I0331 06:07:05.648299       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:05.649036       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 06:07:05.649024866 +0000 UTC m=+419.477119210
I0331 06:07:05.677232       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:46.108296       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-31 06:07:46.108260706 +0000 UTC m=+459.936355040
I0331 06:07:46.109166       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 06:07:46.109260       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-31 06:07:46.109252136 +0000 UTC m=+459.937346460
I0331 06:07:46.130297       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:46.130410       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 06:07:46.130438       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-31 06:07:46.130426718 +0000 UTC m=+459.958521082
I0331 06:07:46.321603       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f45l6" condition "Approved" to 2026-03-31 06:07:46.321581954 +0000 UTC m=+460.149676298
I0331 06:07:46.345548       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f45l6" condition "Ready" to 2026-03-31 06:07:46.345533533 +0000 UTC m=+460.173627867
I0331 06:07:46.381275       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 06:07:46.38126063 +0000 UTC m=+460.209354974
I0331 06:07:46.410758       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:46.411332       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 06:07:46.41132251 +0000 UTC m=+460.239416844
I0331 06:07:46.428849       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0331 06:07:46.429404       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 06:07:46.429392575 +0000 UTC m=+460.257486939
I0331 06:07:46.433032       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"