I0824 16:38:36.060240       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0824 16:38:36.129697       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0824 16:38:37.188510       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0824 16:38:37.188591       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0824 16:38:37.188611       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0824 16:38:37.189356       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0824 16:38:37.189438       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0824 16:38:37.189499       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0824 16:38:37.225019       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0824 16:38:37.230800       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
E0824 16:39:02.798867       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0824 16:39:34.583714       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0824 16:39:34.590499       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0824 16:39:34.594950       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0824 16:39:34.600414       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0824 16:39:34.603403       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0824 16:39:34.603593       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0824 16:39:34.606290       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0824 16:39:34.609562       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0824 16:39:34.612473       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0824 16:39:34.614949       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0824 16:39:34.614967       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0824 16:39:34.614974       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0824 16:39:34.614984       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0824 16:39:34.618870       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0824 16:39:34.620791       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0824 16:39:34.624983       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0824 16:39:34.629410       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0824 16:39:34.631647       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0824 16:39:34.634409       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0824 16:39:34.636572       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0824 16:39:34.638679       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0824 16:39:34.640650       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0824 16:39:34.642531       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0824 16:39:34.642567       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0824 16:39:34.642634       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0824 16:39:34.649895       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.650292       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.651580       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.653045       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.653879       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.655119       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.656651       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.659704       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.661749       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.667117       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:39:34.672512       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0824 16:45:01.102291       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-08-24 16:45:01.102223896 +0000 UTC m=+406.319106587
I0824 16:45:01.103003       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0824 16:45:01.103105       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-08-24 16:45:01.103093545 +0000 UTC m=+406.319976216
I0824 16:45:01.120804       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:01.120992       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-08-24 16:45:01.120981758 +0000 UTC m=+406.337864419
I0824 16:45:01.438035       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:01.520435       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-08-24 16:45:01.520417591 +0000 UTC m=+406.737300242
I0824 16:45:01.636799       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-08-24 16:45:01.636782185 +0000 UTC m=+406.853664836
I0824 16:45:02.053531       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 16:45:02.053512207 +0000 UTC m=+407.270394868
I0824 16:45:02.196928       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 16:45:02.196912324 +0000 UTC m=+407.413795015
I0824 16:45:02.197551       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:02.211730       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:02.543455       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:47.761908       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0824 16:45:47.761961       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-24 16:45:47.761948293 +0000 UTC m=+452.978830974
I0824 16:45:47.762556       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 16:45:47.762545336 +0000 UTC m=+452.979428027
I0824 16:45:47.780185       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:47.780303       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 16:45:47.780293806 +0000 UTC m=+452.997176467
I0824 16:45:47.946498       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:47.978107       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-24 16:45:47.978059907 +0000 UTC m=+453.194942598
I0824 16:45:47.998107       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-24 16:45:47.998094279 +0000 UTC m=+453.214976930
I0824 16:45:48.060964       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 16:45:48.060952549 +0000 UTC m=+453.277835220
I0824 16:45:48.083144       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:48.083971       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 16:45:48.083934039 +0000 UTC m=+453.300816690
I0824 16:45:48.138896       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0824 16:45:48.140839       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"