I0603 17:41:28.675159       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0603 17:41:28.675260       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0603 17:41:28.675317       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0603 17:41:28.678780       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0603 17:41:28.679397       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0603 17:41:28.679458       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0603 17:41:28.679534       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0603 17:41:28.681914       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0603 17:41:28.712113       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0603 17:41:28.723717       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0603 17:41:28.727059       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0603 17:41:28.729831       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0603 17:41:28.729861       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0603 17:41:28.729871       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0603 17:41:28.729915       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0603 17:41:28.732296       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0603 17:41:28.732322       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0603 17:41:28.732404       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0603 17:41:28.734841       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0603 17:41:28.737255       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0603 17:41:28.740494       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0603 17:41:28.745539       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0603 17:41:28.749895       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0603 17:41:28.754099       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0603 17:41:28.755906       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0603 17:41:28.755950       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0603 17:41:28.757898       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0603 17:41:28.759794       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0603 17:41:28.762102       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0603 17:41:28.764031       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0603 17:41:28.769363       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0603 17:41:28.771988       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0603 17:41:28.774716       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0603 17:41:28.778109       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.778771       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.778801       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.779474       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.795863       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.810793       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.825874       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.843025       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.860922       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:28.874007       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0603 17:41:40.200454       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-03 17:41:40.200439925 +0000 UTC m=+11.558789156
I0603 17:41:40.952986       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-03 17:41:40.952955816 +0000 UTC m=+12.311305037
I0603 17:41:40.954570       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:41:40.954627       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-03 17:41:40.954616666 +0000 UTC m=+12.312965887
E0603 17:41:41.011426       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0603 17:41:41.011530       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-03 17:41:41.011520154 +0000 UTC m=+12.369869395
E0603 17:41:41.011564       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0603 17:41:41.015939       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:41:41.016187       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:41:41.016275       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-03 17:41:41.016259306 +0000 UTC m=+12.374608577
E0603 17:41:41.043947       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0603 17:41:41.044729       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0603 17:41:41.044805       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0603 17:41:41.044916       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0603 17:41:41.134267       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:41:41.135304       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z8tzn" condition "Approved" to 2026-06-03 17:41:41.135287337 +0000 UTC m=+12.493636578
I0603 17:41:41.199140       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z8tzn" condition "Ready" to 2026-06-03 17:41:41.19912692 +0000 UTC m=+12.557476141
I0603 17:41:41.245256       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:41:41.245239262 +0000 UTC m=+12.603588503
I0603 17:41:41.290884       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:41:41.447809       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:41:46.044591       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:41:46.044581135 +0000 UTC m=+17.402930356
I0603 17:42:10.346488       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-03 17:42:10.346470649 +0000 UTC m=+41.704819870
I0603 17:42:10.346854       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:42:10.346954       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-03 17:42:10.346887717 +0000 UTC m=+41.705236938
I0603 17:42:10.369712       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-03 17:42:10.369696686 +0000 UTC m=+41.728045897
I0603 17:42:10.394054       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:42:10.394115       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-03 17:42:10.394106236 +0000 UTC m=+41.752455457
I0603 17:42:10.587853       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:42:10.623622       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-67nq9" condition "Approved" to 2026-06-03 17:42:10.623608923 +0000 UTC m=+41.981958134
I0603 17:42:10.657215       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-67nq9" condition "Ready" to 2026-06-03 17:42:10.657204359 +0000 UTC m=+42.015553580
I0603 17:42:10.706438       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:42:10.706420576 +0000 UTC m=+42.064769797
I0603 17:42:10.729073       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:42:10.800422       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:46:17.351168       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-06-03 17:46:17.351157167 +0000 UTC m=+288.709506378
I0603 17:46:17.351247       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:46:17.351577       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-06-03 17:46:17.351563668 +0000 UTC m=+288.709912939
I0603 17:46:17.368305       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:46:17.368349       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:46:17.368385       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-06-03 17:46:17.36838032 +0000 UTC m=+288.726729521
I0603 17:46:17.554995       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6sr6m" condition "Approved" to 2026-06-03 17:46:17.554986308 +0000 UTC m=+288.913335519
I0603 17:46:17.577151       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6sr6m" condition "Ready" to 2026-06-03 17:46:17.577136679 +0000 UTC m=+288.935485920
I0603 17:46:17.605559       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:46:17.605547985 +0000 UTC m=+288.963897196
I0603 17:46:17.623852       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:46:17.624330       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:46:17.624320941 +0000 UTC m=+288.982670192
I0603 17:46:17.641300       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:22.630643       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-03 17:47:22.63062443 +0000 UTC m=+353.988973681
I0603 17:47:22.630726       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:47:22.630932       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-03 17:47:22.630919236 +0000 UTC m=+353.989268477
E0603 17:47:22.643173       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0603 17:47:22.643255       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-03 17:47:22.643248227 +0000 UTC m=+354.001597448
E0603 17:47:22.643332       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0603 17:47:22.647369       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:22.647462       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:47:22.647498       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-03 17:47:22.647490065 +0000 UTC m=+354.005839286
E0603 17:47:22.661511       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0603 17:47:22.661920       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0603 17:47:22.661978       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0603 17:47:22.662518       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0603 17:47:22.692214       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:22.697784       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kjfs7" condition "Approved" to 2026-06-03 17:47:22.697777364 +0000 UTC m=+354.056126585
I0603 17:47:22.713678       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kjfs7" condition "Ready" to 2026-06-03 17:47:22.713665177 +0000 UTC m=+354.072014428
I0603 17:47:22.743572       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:47:22.743556669 +0000 UTC m=+354.101905890
I0603 17:47:22.759830       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:22.760186       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:47:22.760177629 +0000 UTC m=+354.118526850
I0603 17:47:22.786639       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:22.787026       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:47:22.787016763 +0000 UTC m=+354.145365984
I0603 17:47:22.788981       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:47:27.661892       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:47:27.661881514 +0000 UTC m=+359.020230735
I0603 17:48:10.084453       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-03 17:48:10.084441832 +0000 UTC m=+401.442791043
I0603 17:48:10.087018       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:10.087060       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-03 17:48:10.087053456 +0000 UTC m=+401.445402677
I0603 17:48:10.087598       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:10.087625       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-03 17:48:10.087619118 +0000 UTC m=+401.445968339
I0603 17:48:10.087889       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-03 17:48:10.087883523 +0000 UTC m=+401.446232744
I0603 17:48:10.100961       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-03 17:48:10.100946959 +0000 UTC m=+401.459296170
I0603 17:48:10.103532       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:10.110928       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-03 17:48:10.110913503 +0000 UTC m=+401.469262734
I0603 17:48:10.130171       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.130325       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-03 17:48:10.130319059 +0000 UTC m=+401.488668270
I0603 17:48:10.135811       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.135917       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:10.135941       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-03 17:48:10.135936364 +0000 UTC m=+401.494285565
I0603 17:48:10.146232       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.146268       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:10.147695       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-03 17:48:10.147686673 +0000 UTC m=+401.506035904
I0603 17:48:10.467900       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7lb4z" condition "Approved" to 2026-06-03 17:48:10.467889267 +0000 UTC m=+401.826238478
I0603 17:48:10.500396       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7lb4z" condition "Ready" to 2026-06-03 17:48:10.500388391 +0000 UTC m=+401.858737602
I0603 17:48:10.518134       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.533028       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r48ss" condition "Approved" to 2026-06-03 17:48:10.533020037 +0000 UTC m=+401.891369248
I0603 17:48:10.549131       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r48ss" condition "Ready" to 2026-06-03 17:48:10.549120705 +0000 UTC m=+401.907469916
I0603 17:48:10.575681       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:10.575670747 +0000 UTC m=+401.934019958
I0603 17:48:10.598893       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:10.59888323 +0000 UTC m=+401.957232441
I0603 17:48:10.603057       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.603344       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:10.603338962 +0000 UTC m=+401.961688173
I0603 17:48:10.722283       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.729394       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:10.790100       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nxqf4" condition "Approved" to 2026-06-03 17:48:10.790084092 +0000 UTC m=+402.148433313
I0603 17:48:10.881174       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nxqf4" condition "Ready" to 2026-06-03 17:48:10.881160561 +0000 UTC m=+402.239509802
I0603 17:48:11.220505       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0603 17:48:11.368786       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-s84vd\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0603 17:48:11.506432       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:11.506412768 +0000 UTC m=+402.864762029
I0603 17:48:11.621379       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:11.621910       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:11.621887949 +0000 UTC m=+402.980237170
I0603 17:48:11.869118       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:11.919965       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:18.445973       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" condition "Ready" to 2026-06-03 17:48:18.445955554 +0000 UTC m=+409.804304775
I0603 17:48:18.446529       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:18.446568       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" condition "Issuing" to 2026-06-03 17:48:18.446559266 +0000 UTC m=+409.804908487
I0603 17:48:18.462526       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:18.462598       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:18.462616       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" condition "Issuing" to 2026-06-03 17:48:18.462610049 +0000 UTC m=+409.820959270
I0603 17:48:18.653817       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vtdwv-4jl5l" condition "Approved" to 2026-06-03 17:48:18.653802488 +0000 UTC m=+410.012151699
I0603 17:48:18.671333       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vtdwv-4jl5l" condition "Ready" to 2026-06-03 17:48:18.67131811 +0000 UTC m=+410.029667331
I0603 17:48:18.700950       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:18.700940015 +0000 UTC m=+410.059289236
I0603 17:48:18.726036       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtdwv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:30.669367       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:30.669401       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-03 17:48:30.66939399 +0000 UTC m=+422.027743211
I0603 17:48:30.669443       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-03 17:48:30.669414011 +0000 UTC m=+422.027763262
I0603 17:48:30.686864       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:30.686934       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:48:30.686954       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-03 17:48:30.686948935 +0000 UTC m=+422.045298146
I0603 17:48:30.849713       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zz9mh" condition "Approved" to 2026-06-03 17:48:30.84970199 +0000 UTC m=+422.208051211
I0603 17:48:30.873999       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zz9mh" condition "Ready" to 2026-06-03 17:48:30.873989637 +0000 UTC m=+422.232338848
I0603 17:48:30.917404       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:30.917391868 +0000 UTC m=+422.275741079
I0603 17:48:30.932949       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:30.933314       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:30.933304201 +0000 UTC m=+422.291653422
I0603 17:48:30.967749       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:48:30.968156       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:48:30.968147875 +0000 UTC m=+422.326497086
I0603 17:48:30.972569       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:58.811696       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-03 17:51:58.81167664 +0000 UTC m=+630.170025871
I0603 17:51:58.811953       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:51:58.812207       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-03 17:51:58.812198568 +0000 UTC m=+630.170547799
I0603 17:51:58.830750       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:58.830835       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-03 17:51:58.830826896 +0000 UTC m=+630.189176117
I0603 17:51:58.990432       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:59.032158       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmck2" condition "Approved" to 2026-06-03 17:51:59.032145889 +0000 UTC m=+630.390495100
I0603 17:51:59.056514       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmck2" condition "Ready" to 2026-06-03 17:51:59.056501408 +0000 UTC m=+630.414850629
I0603 17:51:59.091260       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:51:59.091241432 +0000 UTC m=+630.449590673
I0603 17:51:59.116628       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:59.116907       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:51:59.116901841 +0000 UTC m=+630.475251052
I0603 17:51:59.122578       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:59.137149       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:51:59.137523       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:51:59.13751405 +0000 UTC m=+630.495863271
I0603 17:52:41.062024       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-03 17:52:41.062009861 +0000 UTC m=+672.420359082
I0603 17:52:41.062423       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0603 17:52:41.062468       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-03 17:52:41.062464048 +0000 UTC m=+672.420813269
I0603 17:52:41.082687       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:52:41.082761       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-03 17:52:41.082752987 +0000 UTC m=+672.441102208
I0603 17:52:41.409747       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:52:41.447676       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gzc26" condition "Approved" to 2026-06-03 17:52:41.447596957 +0000 UTC m=+672.805946178
I0603 17:52:41.484058       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gzc26" condition "Ready" to 2026-06-03 17:52:41.484049039 +0000 UTC m=+672.842398250
I0603 17:52:41.530560       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:52:41.530548569 +0000 UTC m=+672.888897780
I0603 17:52:41.549701       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0603 17:52:41.550117       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 17:52:41.550110926 +0000 UTC m=+672.908460147
I0603 17:52:41.579131       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"