I0626 10:15:25.270981       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0626 10:15:25.271208       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0626 10:15:25.277042       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0626 10:15:25.277067       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0626 10:15:25.277078       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0626 10:15:25.277907       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0626 10:15:25.277945       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0626 10:15:25.278162       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0626 10:15:25.283167       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0626 10:15:25.301032       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0626 10:15:25.301267       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0626 10:15:25.308794       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0626 10:15:25.311163       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0626 10:15:25.316120       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0626 10:15:25.318772       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0626 10:15:25.321235       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0626 10:15:25.323089       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0626 10:15:25.324840       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0626 10:15:25.331597       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0626 10:15:25.331676       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0626 10:15:25.335294       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0626 10:15:25.337929       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0626 10:15:25.340513       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0626 10:15:25.343260       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0626 10:15:25.346127       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0626 10:15:25.346168       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0626 10:15:25.346284       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0626 10:15:25.348845       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0626 10:15:25.349053       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0626 10:15:25.352201       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0626 10:15:25.358665       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0626 10:15:25.362125       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0626 10:15:25.362164       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0626 10:15:25.365210       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0626 10:15:25.366382       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.366951       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.367461       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.368058       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.368800       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.368824       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.388581       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.403789       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.421656       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.442755       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:25.469109       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0626 10:15:36.903686       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 10:15:36.90367006 +0000 UTC m=+11.660927453
I0626 10:15:37.651899       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:15:37.651881706 +0000 UTC m=+12.409139139
I0626 10:15:37.652046       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:15:37.652104       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:15:37.652092929 +0000 UTC m=+12.409350332
E0626 10:15:37.664603       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0626 10:15:37.664717       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 10:15:37.664708999 +0000 UTC m=+12.421966402
E0626 10:15:37.664761       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0626 10:15:37.665634       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:15:37.665708       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:15:37.665700976 +0000 UTC m=+12.422958379
E0626 10:15:37.679552       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0626 10:15:37.679631       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0626 10:15:37.679657       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0626 10:15:37.679687       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0626 10:15:37.683799       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:15:37.712465       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-26 10:15:37.712452319 +0000 UTC m=+12.469709752
I0626 10:15:37.740779       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-26 10:15:37.740764875 +0000 UTC m=+12.498022298
I0626 10:15:37.763899       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:15:37.763891744 +0000 UTC m=+12.521149147
I0626 10:15:37.781072       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:15:37.781460       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:15:37.781452359 +0000 UTC m=+12.538709762
I0626 10:15:37.796031       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:15:42.680912       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:15:42.680872829 +0000 UTC m=+17.438130252
I0626 10:16:05.649368       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:16:05.649453       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:16:05.649440942 +0000 UTC m=+40.406698345
I0626 10:16:05.652020       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:16:05.651996116 +0000 UTC m=+40.409253569
I0626 10:16:05.663322       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 10:16:05.663308413 +0000 UTC m=+40.420565806
I0626 10:16:05.675313       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:16:05.675512       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:16:05.675605       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:16:05.675582096 +0000 UTC m=+40.432839499
I0626 10:16:06.112517       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:16:06.124322       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-26 10:16:06.124306568 +0000 UTC m=+40.881564001
I0626 10:16:06.161161       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-26 10:16:06.161150774 +0000 UTC m=+40.918408177
I0626 10:16:06.182743       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:06.182727595 +0000 UTC m=+40.939985018
I0626 10:16:06.202819       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:20:09.011425       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready" to 2026-06-26 10:20:09.011413126 +0000 UTC m=+283.768670519
I0626 10:20:09.012444       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:20:09.012479       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Issuing" to 2026-06-26 10:20:09.012475094 +0000 UTC m=+283.769732497
I0626 10:20:09.033123       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:20:09.033191       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready" to 2026-06-26 10:20:09.033186375 +0000 UTC m=+283.790443768
I0626 10:20:09.279851       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:20:09.314169       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-78.nip.io-tls-1" condition "Approved" to 2026-06-26 10:20:09.314159688 +0000 UTC m=+284.071417091
I0626 10:20:09.328488       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-78.nip.io-tls-1" condition "Ready" to 2026-06-26 10:20:09.328139769 +0000 UTC m=+284.085397172
I0626 10:20:09.348887       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:20:09.348876101 +0000 UTC m=+284.106133494
I0626 10:20:09.362284       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:20:09.363139       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:20:09.363128775 +0000 UTC m=+284.120386208
I0626 10:20:09.384832       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:20:09.385410       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:20:09.385402135 +0000 UTC m=+284.142659538
I0626 10:21:13.738789       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:21:13.738875       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 10:21:13.738866328 +0000 UTC m=+348.496123761
I0626 10:21:13.738924       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:21:13.738908558 +0000 UTC m=+348.496165961
I0626 10:21:13.755785       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:21:13.755884       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:21:13.755873762 +0000 UTC m=+348.513131175
E0626 10:21:13.763577       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0626 10:21:13.763647       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 10:21:13.763640643 +0000 UTC m=+348.520898046
E0626 10:21:13.763671       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0626 10:21:13.782385       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
E0626 10:21:13.782471       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0626 10:21:13.782491       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0626 10:21:13.782511       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0626 10:21:13.826726       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:21:13.922538       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-26 10:21:13.922520289 +0000 UTC m=+348.679777712
I0626 10:21:13.959340       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-26 10:21:13.959327699 +0000 UTC m=+348.716585102
I0626 10:21:13.991592       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:21:13.991581797 +0000 UTC m=+348.748839190
I0626 10:21:14.011656       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:21:14.054955       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:21:18.782815       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:21:18.782802433 +0000 UTC m=+353.540059856
I0626 10:22:00.577407       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:00.577474       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:22:00.577466976 +0000 UTC m=+395.334724379
I0626 10:22:00.577781       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 10:22:00.577775406 +0000 UTC m=+395.335032809
I0626 10:22:00.590122       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:00.590158       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:22:00.590150172 +0000 UTC m=+395.347407575
I0626 10:22:00.591070       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:22:00.591011736 +0000 UTC m=+395.348269139
I0626 10:22:00.591807       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:00.591831       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:22:00.591826341 +0000 UTC m=+395.349083744
I0626 10:22:00.592068       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:22:00.592063394 +0000 UTC m=+395.349320797
I0626 10:22:00.605527       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:00.609153       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:00.612271       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:22:00.612249013 +0000 UTC m=+395.369506426
I0626 10:22:00.613294       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:00.614299       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:22:00.614285112 +0000 UTC m=+395.371542515
I0626 10:22:00.627611       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:00.627760       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:22:00.627753595 +0000 UTC m=+395.385010988
I0626 10:22:00.881043       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:00.943748       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:00.971230       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-26 10:22:00.971221347 +0000 UTC m=+395.728478740
I0626 10:22:00.987308       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-26 10:22:00.987298741 +0000 UTC m=+395.744556134
I0626 10:22:01.000408       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-26 10:22:01.000348046 +0000 UTC m=+395.757605499
I0626 10:22:01.013057       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-26 10:22:01.013044638 +0000 UTC m=+395.770302041
I0626 10:22:01.021021       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:01.021012144 +0000 UTC m=+395.778269537
I0626 10:22:01.039320       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:01.040295       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:01.040284173 +0000 UTC m=+395.797541576
I0626 10:22:01.040324       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:01.040314262 +0000 UTC m=+395.797571665
I0626 10:22:01.042269       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-26 10:22:01.042261263 +0000 UTC m=+395.799518666
I0626 10:22:01.367548       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:01.368162       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:01.368155119 +0000 UTC m=+396.125412522
I0626 10:22:01.630083       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-26 10:22:01.630074628 +0000 UTC m=+396.387332021
I0626 10:22:01.924368       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:02.018614       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:02.178454       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.controller" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-1" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-pmbch" resource_namespace="monitoring" resource_kind="" resource_version=""
I0626 10:22:02.269579       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:02.320099       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:02.579379       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-26 10:22:02.579364889 +0000 UTC m=+397.336622292
I0626 10:22:02.652810       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-26 10:22:02.652800407 +0000 UTC m=+397.410057810
I0626 10:22:03.125692       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:03.125678739 +0000 UTC m=+397.882936132
I0626 10:22:03.220563       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:03.221278       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:03.22124251 +0000 UTC m=+397.978499913
I0626 10:22:03.420142       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:11.172082       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Ready" to 2026-06-26 10:22:11.172061255 +0000 UTC m=+405.929318738
I0626 10:22:11.172382       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:11.172408       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Issuing" to 2026-06-26 10:22:11.172403403 +0000 UTC m=+405.929660796
I0626 10:22:11.183810       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:11.183901       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Ready" to 2026-06-26 10:22:11.183893675 +0000 UTC m=+405.941151058
I0626 10:22:11.281325       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:11.306801       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls-1" condition "Approved" to 2026-06-26 10:22:11.306789301 +0000 UTC m=+406.064046694
I0626 10:22:11.328282       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls-1" condition "Ready" to 2026-06-26 10:22:11.328273926 +0000 UTC m=+406.085531309
I0626 10:22:11.370377       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:11.370365146 +0000 UTC m=+406.127622539
I0626 10:22:11.386147       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:11.386626       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:11.386619232 +0000 UTC m=+406.143876625
I0626 10:22:11.404415       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:11.404809       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4lfqr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:11.404802662 +0000 UTC m=+406.162060055
I0626 10:22:23.346379       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:22:23.346349342 +0000 UTC m=+418.103606735
I0626 10:22:23.347250       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:23.347281       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:22:23.347274536 +0000 UTC m=+418.104531949
I0626 10:22:23.360046       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:23.361481       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:22:23.361516       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:22:23.361507859 +0000 UTC m=+418.118765262
I0626 10:22:23.841623       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:23.851291       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-26 10:22:23.851282326 +0000 UTC m=+418.608539719
I0626 10:22:23.871955       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-26 10:22:23.871938688 +0000 UTC m=+418.629196091
I0626 10:22:23.898493       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:23.898482869 +0000 UTC m=+418.655740262
I0626 10:22:23.910443       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:23.913517       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:22:23.913507391 +0000 UTC m=+418.670764804
I0626 10:22:23.922349       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:22:23.930052       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:25:49.390280       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:25:49.390363       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:25:49.390351323 +0000 UTC m=+624.147608726
I0626 10:25:49.390426       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:25:49.3903995 +0000 UTC m=+624.147656923
I0626 10:25:49.403539       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:25:49.403611       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:25:49.403603748 +0000 UTC m=+624.160861151
I0626 10:25:49.504075       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:25:49.535537       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-26 10:25:49.535526887 +0000 UTC m=+624.292784290
I0626 10:25:49.551495       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-26 10:25:49.551487078 +0000 UTC m=+624.308744471
I0626 10:25:49.580669       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:25:49.580655846 +0000 UTC m=+624.337913239
I0626 10:25:49.596082       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:25:49.633893       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:26:33.703939       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0626 10:26:33.703979       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 10:26:33.703970563 +0000 UTC m=+668.461227986
I0626 10:26:33.704503       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 10:26:33.704488483 +0000 UTC m=+668.461745876
I0626 10:26:33.720228       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:26:33.720478       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 10:26:33.72046715 +0000 UTC m=+668.477724543
I0626 10:26:33.898998       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:26:33.926170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-26 10:26:33.926162201 +0000 UTC m=+668.683419594
I0626 10:26:33.941297       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-26 10:26:33.941287085 +0000 UTC m=+668.698544488
I0626 10:26:33.971192       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:26:33.971180521 +0000 UTC m=+668.728437904
I0626 10:26:33.984879       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0626 10:26:34.000453       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"