I0420 11:49:52.222970       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0420 11:49:52.224110       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0420 11:49:52.224333       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0420 11:49:52.228341       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0420 11:49:52.233080       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0420 11:49:52.233230       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0420 11:49:52.233274       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0420 11:49:52.236347       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0420 11:49:52.251687       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0420 11:49:52.257176       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0420 11:49:52.263422       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0420 11:49:52.263520       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0420 11:49:52.266225       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0420 11:49:52.269013       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0420 11:49:52.273077       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0420 11:49:52.274949       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0420 11:49:52.276936       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0420 11:49:52.281760       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0420 11:49:52.281794       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0420 11:49:52.281809       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0420 11:49:52.281827       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0420 11:49:52.281979       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0420 11:49:52.285479       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0420 11:49:52.287839       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0420 11:49:52.290407       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0420 11:49:52.292784       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0420 11:49:52.295346       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0420 11:49:52.297522       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0420 11:49:52.299291       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0420 11:49:52.301110       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0420 11:49:52.306427       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0420 11:49:52.311665       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0420 11:49:52.311845       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0420 11:49:52.314799       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.314947       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.316062       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.329013       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.341582       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.357004       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.369489       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.384673       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.399460       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:49:52.411506       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 11:50:04.508801       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 11:50:04.508786521 +0000 UTC m=+12.321255925
I0420 11:50:05.348177       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 11:50:05.348163693 +0000 UTC m=+13.160633127
I0420 11:50:05.348271       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:50:05.348674       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:50:05.348640147 +0000 UTC m=+13.161109581
I0420 11:50:05.365564       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:05.365634       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:50:05.365651       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:50:05.365647653 +0000 UTC m=+13.178117047
E0420 11:50:05.370980       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 11:50:05.371191       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 11:50:05.371179865 +0000 UTC m=+13.183649259
E0420 11:50:05.371293       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 11:50:05.384754       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0420 11:50:05.384880       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 11:50:05.384936       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 11:50:05.384978       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0420 11:50:05.404170       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:05.437468       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sc78b" condition "Approved" to 2026-04-20 11:50:05.437454586 +0000 UTC m=+13.249923970
I0420 11:50:05.479640       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sc78b" condition "Ready" to 2026-04-20 11:50:05.479628306 +0000 UTC m=+13.292097700
I0420 11:50:05.503846       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:50:05.503835152 +0000 UTC m=+13.316304546
I0420 11:50:05.526641       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:05.575072       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:10.385628       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:50:10.385571494 +0000 UTC m=+18.198040898
I0420 11:50:34.391462       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 11:50:34.391375273 +0000 UTC m=+42.203844697
I0420 11:50:34.392090       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:50:34.392128       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 11:50:34.392121655 +0000 UTC m=+42.204591079
I0420 11:50:34.410529       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 11:50:34.41051817 +0000 UTC m=+42.222987584
I0420 11:50:34.428029       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:34.428112       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 11:50:34.428104031 +0000 UTC m=+42.240573435
I0420 11:50:34.559352       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:34.602257       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vhhsp" condition "Approved" to 2026-04-20 11:50:34.602243606 +0000 UTC m=+42.414713000
I0420 11:50:34.642106       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vhhsp" condition "Ready" to 2026-04-20 11:50:34.642094312 +0000 UTC m=+42.454563736
I0420 11:50:34.675086       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:50:34.675066455 +0000 UTC m=+42.487535859
I0420 11:50:34.703034       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:34.703806       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:50:34.703795928 +0000 UTC m=+42.516265332
I0420 11:50:34.720572       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:34.733399       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:50:34.733733       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:50:34.733723817 +0000 UTC m=+42.546193211
I0420 11:54:45.794777       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-04-20 11:54:45.794648151 +0000 UTC m=+293.607117555
I0420 11:54:45.795323       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:54:45.795403       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-04-20 11:54:45.79538627 +0000 UTC m=+293.607855704
I0420 11:54:45.813069       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:54:45.813141       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:54:45.813162       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-04-20 11:54:45.813153282 +0000 UTC m=+293.625622696
I0420 11:54:46.111044       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-vzgk7" condition "Approved" to 2026-04-20 11:54:46.109851446 +0000 UTC m=+293.922320870
I0420 11:54:46.157439       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-vzgk7" condition "Ready" to 2026-04-20 11:54:46.157422794 +0000 UTC m=+293.969892198
I0420 11:54:46.184120       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:46.184110979 +0000 UTC m=+293.996580383
I0420 11:54:46.207237       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:53.305723       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 11:55:53.305703153 +0000 UTC m=+361.118172557
I0420 11:55:53.306070       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:55:53.306198       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 11:55:53.306183295 +0000 UTC m=+361.118652719
E0420 11:55:53.317249       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 11:55:53.317295       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 11:55:53.317287254 +0000 UTC m=+361.129756668
E0420 11:55:53.317352       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 11:55:53.324974       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:53.325097       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:55:53.325130       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 11:55:53.325122237 +0000 UTC m=+361.137591671
E0420 11:55:53.330324       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0420 11:55:53.330864       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 11:55:53.330912       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 11:55:53.331083       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0420 11:55:53.358081       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:53.360883       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2v2j2" condition "Approved" to 2026-04-20 11:55:53.360860427 +0000 UTC m=+361.173329831
I0420 11:55:53.374943       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2v2j2" condition "Ready" to 2026-04-20 11:55:53.374935873 +0000 UTC m=+361.187405267
I0420 11:55:53.401826       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:53.401810722 +0000 UTC m=+361.214280116
I0420 11:55:53.421093       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:53.421446       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:53.421404831 +0000 UTC m=+361.233874235
I0420 11:55:53.430008       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:53.441992       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:55:58.331919       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:58.331890701 +0000 UTC m=+366.144360105
I0420 11:56:45.745729       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 11:56:45.745696555 +0000 UTC m=+413.558165959
I0420 11:56:45.746446       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:45.746503       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 11:56:45.746497106 +0000 UTC m=+413.558966500
I0420 11:56:45.748232       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 11:56:45.74822598 +0000 UTC m=+413.560695384
I0420 11:56:45.748560       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:45.748586       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 11:56:45.74858155 +0000 UTC m=+413.561050954
I0420 11:56:45.754207       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 11:56:45.754202435 +0000 UTC m=+413.566671829
I0420 11:56:45.754473       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:45.754493       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 11:56:45.754489843 +0000 UTC m=+413.566959237
I0420 11:56:45.813489       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:45.813563       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:45.813594       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 11:56:45.81358647 +0000 UTC m=+413.626055864
I0420 11:56:45.816027       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:45.816219       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:45.816317       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 11:56:45.81630672 +0000 UTC m=+413.628776124
I0420 11:56:45.822921       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:45.823057       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 11:56:45.823045076 +0000 UTC m=+413.635514470
I0420 11:56:45.966417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:45.997524       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4c8gc" condition "Approved" to 2026-04-20 11:56:45.997515801 +0000 UTC m=+413.809985195
I0420 11:56:46.023503       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4c8gc" condition "Ready" to 2026-04-20 11:56:46.023483347 +0000 UTC m=+413.835952751
I0420 11:56:46.120065       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:46.120055428 +0000 UTC m=+413.932524822
I0420 11:56:46.148906       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:46.149447       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:46.149615       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:46.149611156 +0000 UTC m=+413.962080550
I0420 11:56:46.208515       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6lpb5" condition "Approved" to 2026-04-20 11:56:46.208507507 +0000 UTC m=+414.020976901
I0420 11:56:46.262666       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:46.274290       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:46.274279386 +0000 UTC m=+414.086748780
I0420 11:56:46.292217       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6lpb5" condition "Ready" to 2026-04-20 11:56:46.292196192 +0000 UTC m=+414.104665586
I0420 11:56:46.362174       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ncgpr" condition "Approved" to 2026-04-20 11:56:46.362150011 +0000 UTC m=+414.174619405
I0420 11:56:46.399414       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:46.399392439 +0000 UTC m=+414.211861873
I0420 11:56:46.679488       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ncgpr" condition "Ready" to 2026-04-20 11:56:46.679464861 +0000 UTC m=+414.491934285
I0420 11:56:46.773319       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:46.773807       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:46.773799553 +0000 UTC m=+414.586268957
I0420 11:56:47.123017       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:47.122999922 +0000 UTC m=+414.935469326
I0420 11:56:47.175443       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:47.288120       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:47.288630       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:47.288614787 +0000 UTC m=+415.101084191
I0420 11:56:47.519721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:52.879185       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Ready" to 2026-04-20 11:56:52.879157939 +0000 UTC m=+420.691627363
I0420 11:56:52.879538       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:56:52.879591       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Issuing" to 2026-04-20 11:56:52.879579841 +0000 UTC m=+420.692049235
I0420 11:56:52.895184       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:52.895254       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Ready" to 2026-04-20 11:56:52.895248038 +0000 UTC m=+420.707717432
I0420 11:56:53.079616       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:53.111156       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xsx4k-ck8dz" condition "Approved" to 2026-04-20 11:56:53.11112312 +0000 UTC m=+420.923592544
I0420 11:56:53.139239       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xsx4k-ck8dz" condition "Ready" to 2026-04-20 11:56:53.13921794 +0000 UTC m=+420.951687364
I0420 11:56:53.175254       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:53.175233027 +0000 UTC m=+420.987702461
I0420 11:56:53.202042       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:53.202965       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:53.202948658 +0000 UTC m=+421.015418092
I0420 11:56:53.212404       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:53.223066       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:56:53.223273       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsx4k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:53.223265565 +0000 UTC m=+421.035734959
I0420 11:57:32.024996       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 11:57:32.02493613 +0000 UTC m=+459.837405524
I0420 11:57:32.025404       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:57:32.025431       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 11:57:32.025424873 +0000 UTC m=+459.837894267
I0420 11:57:32.041703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 11:57:32.041785       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 11:57:32.041801       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 11:57:32.041796969 +0000 UTC m=+459.854266373
I0420 11:57:32.457092       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dtl92" condition "Approved" to 2026-04-20 11:57:32.457069703 +0000 UTC m=+460.269539107
I0420 11:57:32.478282       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dtl92" condition "Ready" to 2026-04-20 11:57:32.478268925 +0000 UTC m=+460.290738319
I0420 11:57:32.512415       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:32.512392801 +0000 UTC m=+460.324862205
I0420 11:57:32.542040       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:00:33.863128       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 12:00:33.863183       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 12:00:33.863168021 +0000 UTC m=+641.675637445
I0420 12:00:33.864054       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:00:33.864043824 +0000 UTC m=+641.676513248
I0420 12:00:33.883088       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:00:33.883182       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:00:33.883172982 +0000 UTC m=+641.695642386
I0420 12:00:34.093890       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:00:34.128935       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xzzz9" condition "Approved" to 2026-04-20 12:00:34.128913779 +0000 UTC m=+641.941383203
I0420 12:00:34.148924       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xzzz9" condition "Ready" to 2026-04-20 12:00:34.148912758 +0000 UTC m=+641.961382142
I0420 12:00:34.179157       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:00:34.179143114 +0000 UTC m=+641.991612518
I0420 12:00:34.205252       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:00:34.272345       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:01:17.214226       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 12:01:17.21420939 +0000 UTC m=+685.026678814
I0420 12:01:17.214917       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 12:01:17.214983       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 12:01:17.2149686 +0000 UTC m=+685.027438034
I0420 12:01:17.237532       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:01:17.237871       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 12:01:17.237852705 +0000 UTC m=+685.050322109
I0420 12:01:17.373012       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:01:17.411699       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-twd2x" condition "Approved" to 2026-04-20 12:01:17.411679043 +0000 UTC m=+685.224148447
I0420 12:01:17.441377       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-twd2x" condition "Ready" to 2026-04-20 12:01:17.441361535 +0000 UTC m=+685.253830939
I0420 12:01:17.476700       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:17.476680712 +0000 UTC m=+685.289150106
I0420 12:01:17.498084       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:01:17.498459       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:17.498448978 +0000 UTC m=+685.310918382
I0420 12:01:17.511496       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 12:01:17.522732       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"