I0331 21:18:18.575588 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 21:18:18.575719 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 21:18:18.577063 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 21:18:18.626181 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 21:18:18.626559 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 21:18:18.626715 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 21:18:18.626799 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 21:18:18.648842 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 21:18:18.676602 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 21:18:18.685761 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 21:18:18.685796 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 21:18:18.685802 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 21:18:18.686777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 21:18:18.687219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 21:18:18.698091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 21:18:18.730940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 21:18:18.733787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 21:18:18.735794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 21:18:18.742596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 21:18:18.744562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 21:18:18.746843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 21:18:18.822684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 21:18:18.831543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 21:18:18.842196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 21:18:18.845826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 21:18:18.848950 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 21:18:18.849291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 21:18:18.854276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 21:18:18.857054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 21:18:18.858827 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 21:18:18.858861 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 21:18:18.858900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 21:18:18.861778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 21:18:18.869186 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:18.882849 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:18.885266 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:18.911578 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:18.917141 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:19.098770 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:19.103793 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:19.123003 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:19.142887 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:18:19.169081 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 21:23:06.863365 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-31 21:23:06.863350657 +0000 UTC m=+290.731278226 I0331 21:23:06.864112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:06.864194 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 21:23:06.864186008 +0000 UTC m=+290.732113577 I0331 21:23:06.885618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:06.885736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:06.885768 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-31 21:23:06.885759562 +0000 UTC m=+290.753687161 I0331 21:23:07.028120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fp7jh" condition "Approved" to 2026-03-31 21:23:07.028103596 +0000 UTC m=+290.896031165 I0331 21:23:07.047666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fp7jh" condition "Ready" to 2026-03-31 21:23:07.047650818 +0000 UTC m=+290.915578407 I0331 21:23:07.090966 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:07.090952 +0000 UTC m=+290.958879559 I0331 21:23:07.140490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:07.140732 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:07.140726734 +0000 UTC m=+291.008654293 I0331 21:23:07.163483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:07.163957 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:07.163947658 +0000 UTC m=+291.031875227 I0331 21:23:46.457588 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-31 21:23:46.457567627 +0000 UTC m=+330.325495226 I0331 21:23:46.457609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 21:23:46.457767 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-31 21:23:46.457750951 +0000 UTC m=+330.325678520 I0331 21:23:46.479306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:46.479559 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-31 21:23:46.47954484 +0000 UTC m=+330.347472409 I0331 21:23:46.615045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:46.651446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8zmpm" condition "Approved" to 2026-03-31 21:23:46.65143616 +0000 UTC m=+330.519363729 I0331 21:23:46.671137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8zmpm" condition "Ready" to 2026-03-31 21:23:46.671125696 +0000 UTC m=+330.539053265 I0331 21:23:46.706055 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:46.706042236 +0000 UTC m=+330.573969805 I0331 21:23:46.727933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 21:23:46.728453 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 21:23:46.728440389 +0000 UTC m=+330.596367988 I0331 21:23:46.754656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"