I0417 18:39:50.964814       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0417 18:39:50.964980       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0417 18:39:50.965084       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0417 18:39:50.970345       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0417 18:39:50.970812       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0417 18:39:50.970885       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0417 18:39:50.971076       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0417 18:39:50.973988       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0417 18:39:50.987705       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0417 18:39:50.991357       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0417 18:39:50.991475       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0417 18:39:50.997893       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0417 18:39:51.000709       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0417 18:39:51.002604       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0417 18:39:51.004656       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0417 18:39:51.004762       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0417 18:39:51.006728       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0417 18:39:51.006774       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0417 18:39:51.008832       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0417 18:39:51.011166       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0417 18:39:51.013017       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0417 18:39:51.018826       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0417 18:39:51.021411       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0417 18:39:51.024042       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0417 18:39:51.025995       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0417 18:39:51.028003       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0417 18:39:51.029747       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0417 18:39:51.031388       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0417 18:39:51.031404       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0417 18:39:51.031412       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0417 18:39:51.031581       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0417 18:39:51.033304       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0417 18:39:51.039970       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0417 18:39:51.041945       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.043570       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.043853       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.044231       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.044616       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.044701       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.044804       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.061825       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.082575       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:39:51.132766       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:40:02.452019       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:40:02.452001307 +0000 UTC m=+11.518353395
I0417 18:40:03.219408       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:40:03.219394999 +0000 UTC m=+12.285747107
I0417 18:40:03.219673       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:40:03.219886       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:40:03.21987381 +0000 UTC m=+12.286225898
I0417 18:40:03.235712       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:03.235782       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:40:03.235803       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:40:03.235795742 +0000 UTC m=+12.302147820
E0417 18:40:03.236954       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:40:03.237019       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:40:03.237012439 +0000 UTC m=+12.303364517
E0417 18:40:03.237040       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:40:03.249967       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0417 18:40:03.250345       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:40:03.250479       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:40:03.250570       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0417 18:40:03.288026       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:03.288143       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jnbm7" condition "Approved" to 2026-04-17 18:40:03.288129551 +0000 UTC m=+12.354481629
I0417 18:40:03.302131       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jnbm7" condition "Ready" to 2026-04-17 18:40:03.302118841 +0000 UTC m=+12.368470929
I0417 18:40:03.327221       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:03.327208306 +0000 UTC m=+12.393560394
I0417 18:40:03.350270       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:03.391595       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:08.251606       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:08.251592141 +0000 UTC m=+17.317944259
I0417 18:40:30.553237       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:40:30.553197906 +0000 UTC m=+39.619549994
I0417 18:40:30.553334       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:40:30.553371       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:40:30.553363379 +0000 UTC m=+39.619715497
I0417 18:40:30.569144       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:40:30.569131599 +0000 UTC m=+39.635483697
I0417 18:40:30.585094       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:30.585176       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:40:30.585169774 +0000 UTC m=+39.651521852
I0417 18:40:30.643117       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:30.686014       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2k2q2" condition "Approved" to 2026-04-17 18:40:30.686001426 +0000 UTC m=+39.752353494
I0417 18:40:30.716882       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2k2q2" condition "Ready" to 2026-04-17 18:40:30.716866585 +0000 UTC m=+39.783218663
I0417 18:40:30.758138       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:30.758117648 +0000 UTC m=+39.824469736
I0417 18:40:30.785877       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:30.786381       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:30.78635704 +0000 UTC m=+39.852709118
I0417 18:40:30.808281       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:30.808610       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:30.808586205 +0000 UTC m=+39.874938283
I0417 18:44:53.148145       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-249.nip.io-tls" condition "Ready" to 2026-04-17 18:44:53.148085794 +0000 UTC m=+302.214437882
I0417 18:44:53.148627       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-249.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:44:53.148649       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-249.nip.io-tls" condition "Issuing" to 2026-04-17 18:44:53.148645055 +0000 UTC m=+302.214997143
I0417 18:44:53.163901       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-249.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-249.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:53.163970       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-249.nip.io-tls" condition "Ready" to 2026-04-17 18:44:53.163964296 +0000 UTC m=+302.230316384
I0417 18:44:53.280020       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-249.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-249.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:53.309341       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-249.nip.io-tls-4lnh5" condition "Approved" to 2026-04-17 18:44:53.309330093 +0000 UTC m=+302.375682181
I0417 18:44:53.336684       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-249.nip.io-tls-4lnh5" condition "Ready" to 2026-04-17 18:44:53.336669289 +0000 UTC m=+302.403021397
I0417 18:44:53.360921       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-249.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:44:53.360909703 +0000 UTC m=+302.427261821
I0417 18:44:53.384756       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-249.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-249.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.159887       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:58.159918       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:45:58.159911951 +0000 UTC m=+367.226264029
I0417 18:45:58.159994       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:58.159978532 +0000 UTC m=+367.226330620
E0417 18:45:58.169483       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:45:58.169521       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:45:58.169513498 +0000 UTC m=+367.235865586
E0417 18:45:58.169566       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:45:58.176595       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.176671       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:58.176660694 +0000 UTC m=+367.243012782
E0417 18:45:58.182137       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0417 18:45:58.182483       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:58.182588       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:58.182716       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0417 18:45:58.187840       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.188040       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:58.188032642 +0000 UTC m=+367.254384720
I0417 18:45:58.192795       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.193362       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d28q2" condition "Approved" to 2026-04-17 18:45:58.193353078 +0000 UTC m=+367.259705166
I0417 18:45:58.201212       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:58.201196356 +0000 UTC m=+367.267548424
I0417 18:45:58.204960       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d28q2" condition "Ready" to 2026-04-17 18:45:58.204949859 +0000 UTC m=+367.271301947
I0417 18:45:58.207607       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.226346       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:58.226331818 +0000 UTC m=+367.292683906
I0417 18:45:58.243433       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.244069       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:58.244056459 +0000 UTC m=+367.310408577
I0417 18:45:58.255107       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.266124       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:03.183122       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:03.183114085 +0000 UTC m=+372.249466153
I0417 18:46:43.416975       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:43.417022       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:46:43.41701388 +0000 UTC m=+412.483365968
I0417 18:46:43.417400       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:46:43.417394766 +0000 UTC m=+412.483746854
I0417 18:46:43.423795       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:46:43.423782361 +0000 UTC m=+412.490134439
I0417 18:46:43.424792       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:43.424829       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:46:43.424822037 +0000 UTC m=+412.491174115
I0417 18:46:43.428388       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:46:43.42837558 +0000 UTC m=+412.494727658
I0417 18:46:43.432270       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:43.432305       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:46:43.432299488 +0000 UTC m=+412.498651566
I0417 18:46:43.476570       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.476670       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:43.476709       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:46:43.476701732 +0000 UTC m=+412.543053820
I0417 18:46:43.478384       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.478428       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:46:43.478424098 +0000 UTC m=+412.544776186
I0417 18:46:43.478771       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.478960       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:46:43.478955006 +0000 UTC m=+412.545307094
I0417 18:46:43.778869       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.825961       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lxr67" condition "Approved" to 2026-04-17 18:46:43.825949381 +0000 UTC m=+412.892301469
I0417 18:46:43.856570       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lxr67" condition "Ready" to 2026-04-17 18:46:43.856558818 +0000 UTC m=+412.922910896
I0417 18:46:43.890388       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:43.890379904 +0000 UTC m=+412.956731982
I0417 18:46:43.930262       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.930496       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:43.930490372 +0000 UTC m=+412.996842450
I0417 18:46:43.959699       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:43.961474       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:44.045700       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:44.061397       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phpmm" condition "Approved" to 2026-04-17 18:46:44.061382487 +0000 UTC m=+413.127734595
I0417 18:46:44.076649       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phpmm" condition "Ready" to 2026-04-17 18:46:44.076638875 +0000 UTC m=+413.142990953
I0417 18:46:44.107960       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:44.107949443 +0000 UTC m=+413.174301531
I0417 18:46:44.128178       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:44.133788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:44.260415       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-62zgq" condition "Approved" to 2026-04-17 18:46:44.260397166 +0000 UTC m=+413.326749254
I0417 18:46:44.677632       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-62zgq" condition "Ready" to 2026-04-17 18:46:44.677618289 +0000 UTC m=+413.743970387
I0417 18:46:44.998828       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:44.998810681 +0000 UTC m=+414.065162799
I0417 18:46:45.097336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:49.572975       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" condition "Ready" to 2026-04-17 18:46:49.572953625 +0000 UTC m=+418.639305713
I0417 18:46:49.573463       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:49.573501       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" condition "Issuing" to 2026-04-17 18:46:49.573497344 +0000 UTC m=+418.639849422
I0417 18:46:49.598820       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqw76-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:49.598895       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" condition "Ready" to 2026-04-17 18:46:49.598887649 +0000 UTC m=+418.665239727
I0417 18:46:49.746004       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqw76-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:49.781580       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqw76-bctfc" condition "Approved" to 2026-04-17 18:46:49.78156219 +0000 UTC m=+418.847914288
I0417 18:46:49.802099       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqw76-bctfc" condition "Ready" to 2026-04-17 18:46:49.802069823 +0000 UTC m=+418.868421901
I0417 18:46:49.836134       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:49.836108056 +0000 UTC m=+418.902460134
I0417 18:46:49.859157       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqw76-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:49.859387       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:49.859378431 +0000 UTC m=+418.925730499
I0417 18:46:49.870821       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqw76-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:49.888336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqw76-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqw76-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:04.838596       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:47:04.838653       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:47:04.838636933 +0000 UTC m=+433.904989041
I0417 18:47:04.839559       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:47:04.839535656 +0000 UTC m=+433.905887764
I0417 18:47:04.880960       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:04.881045       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:47:04.881038905 +0000 UTC m=+433.947390983
I0417 18:47:05.134117       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:05.170135       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8vv6" condition "Approved" to 2026-04-17 18:47:05.170116592 +0000 UTC m=+434.236468700
I0417 18:47:05.197564       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8vv6" condition "Ready" to 2026-04-17 18:47:05.197543997 +0000 UTC m=+434.263896105
I0417 18:47:05.232985       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:05.232965237 +0000 UTC m=+434.299317325
I0417 18:47:05.257359       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:05.327016       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:17.190912       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:50:17.190875884 +0000 UTC m=+626.257227992
I0417 18:50:17.191050       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:17.191105       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:50:17.191099547 +0000 UTC m=+626.257451615
I0417 18:50:17.213368       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:17.213440       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:17.213465       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:50:17.213457959 +0000 UTC m=+626.279810047
I0417 18:50:17.391441       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:17.399466       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dcf9j" condition "Approved" to 2026-04-17 18:50:17.399455926 +0000 UTC m=+626.465808004
I0417 18:50:17.417462       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dcf9j" condition "Ready" to 2026-04-17 18:50:17.417449645 +0000 UTC m=+626.483801723
I0417 18:50:17.447091       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:17.447076736 +0000 UTC m=+626.513428854
I0417 18:50:17.465999       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:17.508848       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:00.325825       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:51:00.325884       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 18:51:00.325869045 +0000 UTC m=+669.392221173
I0417 18:51:00.325931       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 18:51:00.325909756 +0000 UTC m=+669.392261874
I0417 18:51:00.344464       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:00.344521       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:51:00.344537       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 18:51:00.34453058 +0000 UTC m=+669.410882658
I0417 18:51:00.495123       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-98qzp" condition "Approved" to 2026-04-17 18:51:00.495115876 +0000 UTC m=+669.561467944
I0417 18:51:00.515221       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-98qzp" condition "Ready" to 2026-04-17 18:51:00.515212479 +0000 UTC m=+669.581564557
I0417 18:51:00.554488       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:00.55447633 +0000 UTC m=+669.620828398
I0417 18:51:00.576880       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:00.577345       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:00.577339334 +0000 UTC m=+669.643691412
I0417 18:51:00.585461       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:00.607104       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"