I0729 01:51:27.338106 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0729 01:51:27.338243 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0729 01:51:27.338352 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0729 01:51:27.343637 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0729 01:51:27.344132 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0729 01:51:27.345552 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0729 01:51:27.345658 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0729 01:51:27.352364 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0729 01:51:27.378035 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0729 01:51:27.397519 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0729 01:51:27.399809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0729 01:51:27.400207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0729 01:51:27.403811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0729 01:51:27.407785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0729 01:51:27.415962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0729 01:51:27.423073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0729 01:51:27.423174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0729 01:51:27.423107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0729 01:51:27.430404 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0729 01:51:27.435804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0729 01:51:27.439813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0729 01:51:27.442893 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0729 01:51:27.443987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0729 01:51:27.444030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0729 01:51:27.447794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0729 01:51:27.447846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0729 01:51:27.464672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0729 01:51:27.484280 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0729 01:51:27.484645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0729 01:51:27.484778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0729 01:51:27.494047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0729 01:51:27.496394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0729 01:51:27.499412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0729 01:51:27.503810 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.505878 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.506291 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.509060 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.509329 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.511045 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.530278 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.573416 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.611321 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:51:27.983953 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0729 01:56:46.936992 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-29 01:56:46.936978958 +0000 UTC m=+319.654555436 I0729 01:56:46.938775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 01:56:46.938844 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-29 01:56:46.938836277 +0000 UTC m=+319.656412755 I0729 01:56:46.957693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:56:46.957815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 01:56:46.957850 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-29 01:56:46.957840643 +0000 UTC m=+319.675417121 I0729 01:56:47.208117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-ghbtn" condition "Approved" to 2026-07-29 01:56:47.208106714 +0000 UTC m=+319.925683192 I0729 01:56:47.239417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-ghbtn" condition "Ready" to 2026-07-29 01:56:47.239406781 +0000 UTC m=+319.956983259 I0729 01:56:47.272898 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 01:56:47.272885837 +0000 UTC m=+319.990462315 I0729 01:56:47.297301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:56:47.297642 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 01:56:47.297623555 +0000 UTC m=+320.015200023 I0729 01:56:47.342505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:57:23.530268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 01:57:23.530314 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-29 01:57:23.530303258 +0000 UTC m=+356.247879766 I0729 01:57:23.531093 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-29 01:57:23.531083223 +0000 UTC m=+356.248659731 I0729 01:57:23.547976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:57:23.548290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 01:57:23.548320 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-29 01:57:23.548312712 +0000 UTC m=+356.265889190 I0729 01:57:23.684892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:57:23.693573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mjtr" condition "Approved" to 2026-07-29 01:57:23.693556248 +0000 UTC m=+356.411132766 I0729 01:57:23.713215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mjtr" condition "Ready" to 2026-07-29 01:57:23.713205654 +0000 UTC m=+356.430782122 I0729 01:57:23.738922 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 01:57:23.738906932 +0000 UTC m=+356.456483400 I0729 01:57:23.764613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 01:57:23.823484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" E0729 01:58:07.700038 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out