I0827 20:05:50.188234 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0827 20:05:50.188493 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0827 20:05:50.194086 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0827 20:05:50.194120 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0827 20:05:50.194136 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0827 20:05:50.194738 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0827 20:05:50.194787 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0827 20:05:50.194832 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0827 20:05:50.201121 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0827 20:05:50.216719 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0827 20:05:50.221607 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0827 20:05:50.225580 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0827 20:05:50.232740 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0827 20:05:50.232773 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0827 20:05:50.232870 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0827 20:05:50.237073 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0827 20:05:50.240854 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0827 20:05:50.240888 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0827 20:05:50.244793 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0827 20:05:50.248691 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0827 20:05:50.253142 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0827 20:05:50.253258 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0827 20:05:50.253560 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0827 20:05:50.259503 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0827 20:05:50.263514 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0827 20:05:50.267458 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0827 20:05:50.267495 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0827 20:05:50.272174 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0827 20:05:50.276208 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0827 20:05:50.280090 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0827 20:05:50.284127 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0827 20:05:50.287854 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0827 20:05:50.293891 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0827 20:05:50.298074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0827 20:05:50.302187 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.303081 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.303348 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.303606 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.304296 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.304702 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.329660 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.348266 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.372504 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.392491 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:05:50.417720 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0827 20:06:01.624634 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-27 20:06:01.624617292 +0000 UTC m=+11.472741868 I0827 20:06:02.409526 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:06:02.409612 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-27 20:06:02.409600655 +0000 UTC m=+12.257725231 I0827 20:06:02.410401 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-27 20:06:02.410395433 +0000 UTC m=+12.258520019 I0827 20:06:02.427370 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0827 20:06:02.427542 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0827 20:06:02.427644 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-27 20:06:02.427630155 +0000 UTC m=+12.275754771 E0827 20:06:02.427694 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0827 20:06:02.427794 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:06:02.427891 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-27 20:06:02.427877898 +0000 UTC m=+12.276002514 E0827 20:06:02.440497 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0827 20:06:02.440618 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0827 20:06:02.440650 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0827 20:06:02.440686 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0827 20:06:02.475621 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:02.490144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-27 20:06:02.490119832 +0000 UTC m=+12.338244458 I0827 20:06:02.515529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-27 20:06:02.515515959 +0000 UTC m=+12.363640585 I0827 20:06:02.544566 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:06:02.544551614 +0000 UTC m=+12.392676240 I0827 20:06:02.559139 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:02.559596 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:06:02.559585673 +0000 UTC m=+12.407710269 I0827 20:06:02.575865 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:02.579638 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:07.441682 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:06:07.44166344 +0000 UTC m=+17.289788056 I0827 20:06:32.468402 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:06:32.468496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-27 20:06:32.468477906 +0000 UTC m=+42.316602522 I0827 20:06:32.468643 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-27 20:06:32.468619877 +0000 UTC m=+42.316744493 I0827 20:06:32.477713 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-27 20:06:32.477690004 +0000 UTC m=+42.325814630 I0827 20:06:32.490064 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:32.490215 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-27 20:06:32.490204801 +0000 UTC m=+42.338329417 I0827 20:06:32.636176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:32.665240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-27 20:06:32.665230689 +0000 UTC m=+42.513355285 I0827 20:06:32.697718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-27 20:06:32.697697456 +0000 UTC m=+42.545822072 I0827 20:06:32.737336 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:06:32.737323061 +0000 UTC m=+42.585447657 I0827 20:06:32.755421 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:32.794150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:06:32.816197 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:11:37.905492 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:11:37.905654 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Ready" to 2026-08-27 20:11:37.90563675 +0000 UTC m=+347.753761366 I0827 20:11:37.905816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Issuing" to 2026-08-27 20:11:37.905778592 +0000 UTC m=+347.753903208 I0827 20:11:37.923840 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:11:37.923985 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:11:37.924060 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Issuing" to 2026-08-27 20:11:37.924052635 +0000 UTC m=+347.772177261 I0827 20:11:38.292141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:11:38.308777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-80.nip.io-tls-1" condition "Approved" to 2026-08-27 20:11:38.308752411 +0000 UTC m=+348.156877027 I0827 20:11:38.323818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-80.nip.io-tls-1" condition "Ready" to 2026-08-27 20:11:38.323806542 +0000 UTC m=+348.171931158 I0827 20:11:38.350734 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:11:38.350721314 +0000 UTC m=+348.198845930 I0827 20:11:38.365577 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:11:38.366242 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:11:38.366233863 +0000 UTC m=+348.214358479 I0827 20:11:38.377465 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:43.860393 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:12:43.860463 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-27 20:12:43.860454009 +0000 UTC m=+413.708578625 I0827 20:12:43.860628 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-27 20:12:43.860565751 +0000 UTC m=+413.708690367 E0827 20:12:43.883397 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0827 20:12:43.883464 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-27 20:12:43.883455147 +0000 UTC m=+413.731579763 E0827 20:12:43.883489 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0827 20:12:43.906450 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:43.906533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-27 20:12:43.906526175 +0000 UTC m=+413.754650771 I0827 20:12:43.952678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0827 20:12:43.956847 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0827 20:12:43.956929 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0827 20:12:43.957001 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0827 20:12:43.957243 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0827 20:12:43.965301 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:43.973009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-27 20:12:43.972989081 +0000 UTC m=+413.821113677 I0827 20:12:43.988257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-27 20:12:43.988246548 +0000 UTC m=+413.836371144 I0827 20:12:44.002142 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:12:44.002132726 +0000 UTC m=+413.850257342 I0827 20:12:44.011961 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:44.012813 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:12:44.012804498 +0000 UTC m=+413.860929094 I0827 20:12:44.021240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:44.025802 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:12:48.957509 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:12:48.957500538 +0000 UTC m=+418.805625124 I0827 20:13:29.628451 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:29.628524 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-27 20:13:29.628478138 +0000 UTC m=+459.476602734 I0827 20:13:29.628896 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-27 20:13:29.628890523 +0000 UTC m=+459.477015119 I0827 20:13:29.636393 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-27 20:13:29.636373573 +0000 UTC m=+459.484498169 I0827 20:13:29.636465 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:29.636502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-27 20:13:29.636488234 +0000 UTC m=+459.484612830 I0827 20:13:29.639790 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:29.639818 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-27 20:13:29.63981033 +0000 UTC m=+459.487934926 I0827 20:13:29.640199 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-27 20:13:29.640192845 +0000 UTC m=+459.488317441 I0827 20:13:29.667109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.667769 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:29.667828 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-27 20:13:29.667820796 +0000 UTC m=+459.515945392 I0827 20:13:29.676423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.676514 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-27 20:13:29.676508512 +0000 UTC m=+459.524633098 I0827 20:13:29.676694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.685759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-27 20:13:29.685740466 +0000 UTC m=+459.533865052 I0827 20:13:29.747733 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.777076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-27 20:13:29.777056831 +0000 UTC m=+459.625181417 I0827 20:13:29.805544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-27 20:13:29.805533123 +0000 UTC m=+459.653657709 I0827 20:13:29.824456 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:29.824449277 +0000 UTC m=+459.672573863 I0827 20:13:29.837993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.844539 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:29.851156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-27 20:13:29.851142335 +0000 UTC m=+459.699266921 I0827 20:13:29.862619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-27 20:13:29.862611589 +0000 UTC m=+459.710736175 I0827 20:13:29.982462 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:29.982448097 +0000 UTC m=+459.830572683 I0827 20:13:30.019396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:30.181592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:30.182066 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:30.182058503 +0000 UTC m=+460.030183079 I0827 20:13:30.233790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:30.571469 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:30.620746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:30.693490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-27 20:13:30.693476758 +0000 UTC m=+460.541601354 I0827 20:13:30.834283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-27 20:13:30.834251884 +0000 UTC m=+460.682376500 I0827 20:13:31.282206 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:31.282182554 +0000 UTC m=+461.130307180 I0827 20:13:31.373316 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:31.374136 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:31.374124155 +0000 UTC m=+461.222248781 I0827 20:13:31.624260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:31.673329 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:38.932862 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:38.932936 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" condition "Issuing" to 2026-08-27 20:13:38.9329272 +0000 UTC m=+468.781051796 I0827 20:13:38.933585 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" condition "Ready" to 2026-08-27 20:13:38.933577378 +0000 UTC m=+468.781701994 I0827 20:13:38.954857 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j2shs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:38.954920 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" condition "Ready" to 2026-08-27 20:13:38.954912713 +0000 UTC m=+468.803037289 I0827 20:13:39.119346 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j2shs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:39.146261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls-1" condition "Approved" to 2026-08-27 20:13:39.146242743 +0000 UTC m=+468.994367329 I0827 20:13:39.167838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls-1" condition "Ready" to 2026-08-27 20:13:39.16781827 +0000 UTC m=+469.015942896 I0827 20:13:39.191131 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:39.191111838 +0000 UTC m=+469.039236434 I0827 20:13:39.202991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j2shs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j2shs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:52.802670 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-27 20:13:52.802650821 +0000 UTC m=+482.650775417 I0827 20:13:52.802844 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:52.802879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-27 20:13:52.802869514 +0000 UTC m=+482.650994120 I0827 20:13:52.813533 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:52.813631 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:13:52.813672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-27 20:13:52.813664026 +0000 UTC m=+482.661788612 I0827 20:13:53.173389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-27 20:13:53.173377217 +0000 UTC m=+483.021501793 I0827 20:13:53.189421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-27 20:13:53.189413148 +0000 UTC m=+483.037537734 I0827 20:13:53.215985 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:53.215963556 +0000 UTC m=+483.064088142 I0827 20:13:53.231948 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:53.232315 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:13:53.232307799 +0000 UTC m=+483.080432385 I0827 20:13:53.248898 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:13:53.253513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:17:13.883554 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:17:13.883674 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-27 20:17:13.883662509 +0000 UTC m=+683.731787125 I0827 20:17:13.883819 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-27 20:17:13.883794673 +0000 UTC m=+683.731919289 I0827 20:17:13.904715 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:17:13.904812 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:17:13.904848 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-27 20:17:13.904840401 +0000 UTC m=+683.752965017 I0827 20:17:14.170176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-27 20:17:14.170160546 +0000 UTC m=+684.018285142 I0827 20:17:14.189831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-27 20:17:14.189821441 +0000 UTC m=+684.037946027 I0827 20:17:14.229682 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:17:14.229670639 +0000 UTC m=+684.077795225 I0827 20:17:14.243021 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:17:14.243614 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:17:14.243606525 +0000 UTC m=+684.091731111 I0827 20:17:14.257573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:17:14.261775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:18:00.119494 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-27 20:18:00.119470251 +0000 UTC m=+729.967594867 I0827 20:18:00.120252 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:18:00.120392 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-27 20:18:00.120376816 +0000 UTC m=+729.968501442 I0827 20:18:00.191240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:18:00.191294 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0827 20:18:00.191311 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-27 20:18:00.191305347 +0000 UTC m=+730.039429933 I0827 20:18:00.457539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-27 20:18:00.457521402 +0000 UTC m=+730.305645998 I0827 20:18:00.474800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-27 20:18:00.474784791 +0000 UTC m=+730.322909377 I0827 20:18:00.502304 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:18:00.50228778 +0000 UTC m=+730.350412356 I0827 20:18:00.524939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0827 20:18:00.525408 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-27 20:18:00.525398299 +0000 UTC m=+730.373522895 I0827 20:18:00.541337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"