I0709 14:33:06.205080 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0709 14:33:06.205234 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0709 14:33:06.205324 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0709 14:33:06.210179 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0709 14:33:06.210594 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0709 14:33:06.210748 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0709 14:33:06.210904 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0709 14:33:06.213457 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0709 14:33:06.228090 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0709 14:33:06.228354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0709 14:33:06.235090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0709 14:33:06.238563 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0709 14:33:06.238598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0709 14:33:06.238623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0709 14:33:06.241447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0709 14:33:06.244015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0709 14:33:06.246951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0709 14:33:06.249757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0709 14:33:06.251670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0709 14:33:06.256629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0709 14:33:06.256821 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0709 14:33:06.256729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0709 14:33:06.259176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0709 14:33:06.261118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0709 14:33:06.262998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0709 14:33:06.265017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0709 14:33:06.266922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0709 14:33:06.268749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0709 14:33:06.270663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0709 14:33:06.275990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0709 14:33:06.279865 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0709 14:33:06.279928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0709 14:33:06.282955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0709 14:33:06.285429 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.286005 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.286002 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.286832 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.307895 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.320406 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.339518 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.352667 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.368467 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:06.393626 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 14:33:17.768498 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-09 14:33:17.768479228 +0000 UTC m=+11.594268080 I0709 14:33:18.461026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:33:18.461094 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 14:33:18.461084993 +0000 UTC m=+12.286873845 I0709 14:33:18.461206 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 14:33:18.461186254 +0000 UTC m=+12.286975176 E0709 14:33:18.480001 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 14:33:18.480157 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-09 14:33:18.480118339 +0000 UTC m=+12.305907191 E0709 14:33:18.480456 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 14:33:18.484878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:18.484972 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 14:33:18.484964767 +0000 UTC m=+12.310753619 E0709 14:33:18.496224 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0709 14:33:18.497356 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 14:33:18.497746 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 14:33:18.497969 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0709 14:33:18.504104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:18.504166 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 14:33:18.504160025 +0000 UTC m=+12.329948867 I0709 14:33:18.507482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:18.515764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zk5hg" condition "Approved" to 2026-07-09 14:33:18.515755458 +0000 UTC m=+12.341544310 I0709 14:33:18.516768 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 14:33:18.516754499 +0000 UTC m=+12.342543401 I0709 14:33:18.528110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zk5hg" condition "Ready" to 2026-07-09 14:33:18.5280987 +0000 UTC m=+12.353887532 I0709 14:33:18.529628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:18.554185 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:33:18.554172415 +0000 UTC m=+12.379961267 I0709 14:33:18.573775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:18.574374 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:33:18.574364412 +0000 UTC m=+12.400153264 I0709 14:33:18.590100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:23.496714 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:33:23.496693027 +0000 UTC m=+17.322481899 I0709 14:33:45.859502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:33:45.859534 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 14:33:45.859524355 +0000 UTC m=+39.685313187 I0709 14:33:45.859835 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 14:33:45.859661579 +0000 UTC m=+39.685450421 I0709 14:33:45.873850 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-09 14:33:45.873840341 +0000 UTC m=+39.699629183 I0709 14:33:45.898117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:45.898171 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 14:33:45.8981654 +0000 UTC m=+39.723954242 I0709 14:33:46.244726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:33:46.276616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z4p28" condition "Approved" to 2026-07-09 14:33:46.27660661 +0000 UTC m=+40.102395452 I0709 14:33:46.309990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z4p28" condition "Ready" to 2026-07-09 14:33:46.309978505 +0000 UTC m=+40.135767357 I0709 14:33:46.335642 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:33:46.335630493 +0000 UTC m=+40.161419345 I0709 14:33:46.362878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:37:53.963511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:37:53.963577 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Issuing" to 2026-07-09 14:37:53.963570165 +0000 UTC m=+287.789359007 I0709 14:37:53.963460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready" to 2026-07-09 14:37:53.963433913 +0000 UTC m=+287.789222765 I0709 14:37:53.979104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:37:53.979188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:37:53.979214 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Issuing" to 2026-07-09 14:37:53.979208773 +0000 UTC m=+287.804997615 I0709 14:37:54.153475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-s7xbr" condition "Approved" to 2026-07-09 14:37:54.153462537 +0000 UTC m=+287.979251389 I0709 14:37:54.184813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-s7xbr" condition "Ready" to 2026-07-09 14:37:54.184801442 +0000 UTC m=+288.010590294 I0709 14:37:54.209904 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:37:54.209883252 +0000 UTC m=+288.035672144 I0709 14:37:54.230344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:37:54.230923 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:37:54.230916702 +0000 UTC m=+288.056705554 I0709 14:37:54.248211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:37:54.251538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:37:54.251824 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:37:54.251816349 +0000 UTC m=+288.077605201 I0709 14:37:54.254121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.679241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:38:58.679281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 14:38:58.679268491 +0000 UTC m=+352.505057343 I0709 14:38:58.679346 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-09 14:38:58.679331181 +0000 UTC m=+352.505120033 E0709 14:38:58.693161 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 14:38:58.693189 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-09 14:38:58.693183455 +0000 UTC m=+352.518972297 E0709 14:38:58.693223 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 14:38:58.694257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.694408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:38:58.694431 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 14:38:58.694425362 +0000 UTC m=+352.520214214 E0709 14:38:58.703956 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0709 14:38:58.704106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 14:38:58.704146 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 14:38:58.704177 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0709 14:38:58.736470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zxxnn" condition "Approved" to 2026-07-09 14:38:58.73645735 +0000 UTC m=+352.562246202 I0709 14:38:58.751302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zxxnn" condition "Ready" to 2026-07-09 14:38:58.751291468 +0000 UTC m=+352.577080310 I0709 14:38:58.771718 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:38:58.771707034 +0000 UTC m=+352.597495886 I0709 14:38:58.790272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.790726 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:38:58.79071482 +0000 UTC m=+352.616503692 I0709 14:38:58.798750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.808142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.808831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:38:58.809158 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:38:58.809150557 +0000 UTC m=+352.634939409 I0709 14:39:03.704592 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:03.704580992 +0000 UTC m=+357.530369834 I0709 14:39:44.500778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:44.500823 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-09 14:39:44.500804879 +0000 UTC m=+398.326593721 I0709 14:39:44.500854 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 14:39:44.500840159 +0000 UTC m=+398.326629001 I0709 14:39:44.502362 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 14:39:44.502357379 +0000 UTC m=+398.328146221 I0709 14:39:44.502460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:44.502491 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-09 14:39:44.502486441 +0000 UTC m=+398.328275283 I0709 14:39:44.536819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:44.536870 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 14:39:44.536862313 +0000 UTC m=+398.362651175 I0709 14:39:44.537301 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 14:39:44.537295949 +0000 UTC m=+398.363084801 I0709 14:39:44.544216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.544292 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 14:39:44.544284422 +0000 UTC m=+398.370073274 I0709 14:39:44.544706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.545045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:44.545170 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-09 14:39:44.545158165 +0000 UTC m=+398.370947077 I0709 14:39:44.574375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.574438 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 14:39:44.574431508 +0000 UTC m=+398.400220360 I0709 14:39:44.671170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.699083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzjkb" condition "Approved" to 2026-07-09 14:39:44.699073974 +0000 UTC m=+398.524862816 I0709 14:39:44.725732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.726904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzjkb" condition "Ready" to 2026-07-09 14:39:44.726898257 +0000 UTC m=+398.552687099 I0709 14:39:44.755111 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:44.755101657 +0000 UTC m=+398.580890509 I0709 14:39:44.755108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pldzz" condition "Approved" to 2026-07-09 14:39:44.755095067 +0000 UTC m=+398.580883919 I0709 14:39:44.783505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:44.789023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pldzz" condition "Ready" to 2026-07-09 14:39:44.789011363 +0000 UTC m=+398.614800215 I0709 14:39:44.801256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-drqg2" condition "Approved" to 2026-07-09 14:39:44.801246527 +0000 UTC m=+398.627035369 I0709 14:39:45.202953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-drqg2" condition "Ready" to 2026-07-09 14:39:45.202941864 +0000 UTC m=+399.028730716 I0709 14:39:45.238417 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:45.23840399 +0000 UTC m=+399.064192832 I0709 14:39:45.583461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:45.583862 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:45.58385576 +0000 UTC m=+399.409644612 I0709 14:39:45.707617 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:45.707605933 +0000 UTC m=+399.533394775 I0709 14:39:45.983985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:45.984639 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:45.984626352 +0000 UTC m=+399.810415224 I0709 14:39:46.036417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:46.085088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:46.385380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:46.434280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:52.602166 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Ready" to 2026-07-09 14:39:52.602125632 +0000 UTC m=+406.427914514 I0709 14:39:52.603075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:52.603120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Issuing" to 2026-07-09 14:39:52.603105895 +0000 UTC m=+406.428894737 I0709 14:39:52.626398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tngl4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:52.626461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:39:52.626475 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Issuing" to 2026-07-09 14:39:52.626471117 +0000 UTC m=+406.452259959 I0709 14:39:52.766177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tngl4-2lbxp" condition "Approved" to 2026-07-09 14:39:52.766165064 +0000 UTC m=+406.591953906 I0709 14:39:52.785443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tngl4-2lbxp" condition "Ready" to 2026-07-09 14:39:52.785428642 +0000 UTC m=+406.611217494 I0709 14:39:52.811389 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:52.811379418 +0000 UTC m=+406.637168260 I0709 14:39:52.830407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tngl4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:52.830861 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:52.830854068 +0000 UTC m=+406.656642910 I0709 14:39:52.841083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tngl4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:52.853459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tngl4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:39:52.853869 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tngl4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:39:52.853858287 +0000 UTC m=+406.679647169 I0709 14:40:05.297412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:40:05.297446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 14:40:05.297438892 +0000 UTC m=+419.123227734 I0709 14:40:05.297647 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 14:40:05.297631295 +0000 UTC m=+419.123420147 I0709 14:40:05.324785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:40:05.325843 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 14:40:05.325828088 +0000 UTC m=+419.151616950 I0709 14:40:05.950856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:40:05.990882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vghdk" condition "Approved" to 2026-07-09 14:40:05.990867779 +0000 UTC m=+419.816656621 I0709 14:40:06.015756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vghdk" condition "Ready" to 2026-07-09 14:40:06.015745519 +0000 UTC m=+419.841534371 I0709 14:40:06.045944 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:40:06.045928029 +0000 UTC m=+419.871716871 I0709 14:40:06.067219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:11.098666 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 14:43:11.098615964 +0000 UTC m=+604.924404836 I0709 14:43:11.099156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:43:11.099351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 14:43:11.099338364 +0000 UTC m=+604.925127306 I0709 14:43:11.111826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:11.111889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:43:11.111908 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 14:43:11.111901692 +0000 UTC m=+604.937690544 I0709 14:43:11.299337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qjvxb" condition "Approved" to 2026-07-09 14:43:11.299329545 +0000 UTC m=+605.125118387 I0709 14:43:11.318848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qjvxb" condition "Ready" to 2026-07-09 14:43:11.31883658 +0000 UTC m=+605.144625442 I0709 14:43:11.347639 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:43:11.3476282 +0000 UTC m=+605.173417052 I0709 14:43:11.371378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:51.296748 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 14:43:51.296733285 +0000 UTC m=+645.122522127 I0709 14:43:51.296982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 14:43:51.297011 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-09 14:43:51.297005082 +0000 UTC m=+645.122793944 I0709 14:43:51.314362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:51.314479 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 14:43:51.314474884 +0000 UTC m=+645.140263726 I0709 14:43:51.867157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:51.901090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kpqj6" condition "Approved" to 2026-07-09 14:43:51.901074063 +0000 UTC m=+645.726862915 I0709 14:43:51.921679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kpqj6" condition "Ready" to 2026-07-09 14:43:51.921668277 +0000 UTC m=+645.747457119 I0709 14:43:51.951272 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 14:43:51.9512565 +0000 UTC m=+645.777045372 I0709 14:43:51.974335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 14:43:52.020825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"