I0420 04:46:24.892626       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0420 04:46:24.892897       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0420 04:46:24.893084       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0420 04:46:24.901460       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0420 04:46:24.901817       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0420 04:46:24.902762       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0420 04:46:24.902884       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0420 04:46:24.904431       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0420 04:46:24.916731       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0420 04:46:24.922302       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0420 04:46:24.925081       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0420 04:46:24.930235       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0420 04:46:24.932930       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0420 04:46:24.935361       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0420 04:46:24.935435       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0420 04:46:24.938038       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0420 04:46:24.939752       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0420 04:46:24.941629       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0420 04:46:24.945964       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0420 04:46:24.950182       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0420 04:46:24.952629       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0420 04:46:24.954795       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0420 04:46:24.957147       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0420 04:46:24.959365       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0420 04:46:24.959386       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0420 04:46:24.959516       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0420 04:46:24.961163       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0420 04:46:24.962741       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0420 04:46:24.966535       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0420 04:46:24.966582       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0420 04:46:24.966596       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0420 04:46:24.967386       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0420 04:46:24.973098       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0420 04:46:24.976689       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:24.977079       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:24.977085       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:24.978406       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.029968       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.043716       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.059262       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.059689       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.075571       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:25.094741       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0420 04:46:35.625420       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 04:46:35.625406221 +0000 UTC m=+10.763018859
I0420 04:46:36.315317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:46:36.315872       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 04:46:36.315860098 +0000 UTC m=+11.453472776
I0420 04:46:36.315910       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 04:46:36.315884009 +0000 UTC m=+11.453496697
E0420 04:46:36.328401       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 04:46:36.328976       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 04:46:36.328940445 +0000 UTC m=+11.466553123
E0420 04:46:36.329114       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 04:46:36.331385       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:46:36.331472       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:46:36.331494       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 04:46:36.33148681 +0000 UTC m=+11.469099468
E0420 04:46:36.337570       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0420 04:46:36.337736       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 04:46:36.337817       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 04:46:36.337909       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0420 04:46:36.364745       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:46:36.365021       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8z5rw" condition "Approved" to 2026-04-20 04:46:36.365008718 +0000 UTC m=+11.502621376
I0420 04:46:36.377763       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8z5rw" condition "Ready" to 2026-04-20 04:46:36.377754682 +0000 UTC m=+11.515367340
I0420 04:46:36.400732       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:46:36.400722386 +0000 UTC m=+11.538335034
I0420 04:46:36.416926       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:46:36.417153       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:46:36.417148231 +0000 UTC m=+11.554760879
I0420 04:46:36.432635       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:46:36.438152       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:46:41.338884       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:46:41.338824551 +0000 UTC m=+16.476437239
I0420 04:47:03.610694       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:47:03.610729       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 04:47:03.610687664 +0000 UTC m=+38.748300332
I0420 04:47:03.610737       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 04:47:03.610730665 +0000 UTC m=+38.748343323
I0420 04:47:03.627325       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 04:47:03.62731602 +0000 UTC m=+38.764928668
I0420 04:47:03.648065       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:47:03.648134       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 04:47:03.648128267 +0000 UTC m=+38.785740915
I0420 04:47:03.754525       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:47:03.788771       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k8pd5" condition "Approved" to 2026-04-20 04:47:03.788761311 +0000 UTC m=+38.926373969
I0420 04:47:03.820075       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k8pd5" condition "Ready" to 2026-04-20 04:47:03.820061084 +0000 UTC m=+38.957673722
I0420 04:47:03.846986       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:03.846970881 +0000 UTC m=+38.984583549
I0420 04:47:03.868887       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:47:03.869356       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:03.869345777 +0000 UTC m=+39.006958435
I0420 04:47:03.894572       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:51:30.997022       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-04-20 04:51:30.99697507 +0000 UTC m=+306.134587758
I0420 04:51:30.997296       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:51:30.997341       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-04-20 04:51:30.997330713 +0000 UTC m=+306.134943391
I0420 04:51:31.224048       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:51:31.224174       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:51:31.224211       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-04-20 04:51:31.224202483 +0000 UTC m=+306.361815131
I0420 04:51:31.729189       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:51:31.813449       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-lk6vs" condition "Approved" to 2026-04-20 04:51:31.813433403 +0000 UTC m=+306.951046081
I0420 04:51:31.994482       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-lk6vs" condition "Ready" to 2026-04-20 04:51:31.994467303 +0000 UTC m=+307.132079961
I0420 04:51:32.182655       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:51:32.182633476 +0000 UTC m=+307.320246154
I0420 04:51:32.232177       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:51:32.240205       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:51:32.240195359 +0000 UTC m=+307.377808007
I0420 04:51:32.271884       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:52:40.172261       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 04:52:40.172196866 +0000 UTC m=+375.309809554
I0420 04:52:40.172357       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:52:40.172532       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 04:52:40.172515265 +0000 UTC m=+375.310127923
I0420 04:52:40.187172       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:52:40.187403       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:52:40.187435       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 04:52:40.187427161 +0000 UTC m=+375.325039819
E0420 04:52:40.187638       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0420 04:52:40.187727       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 04:52:40.187720079 +0000 UTC m=+375.325332727
E0420 04:52:40.187755       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 04:52:40.200445       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0420 04:52:40.200577       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 04:52:40.200622       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0420 04:52:40.200679       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0420 04:52:40.228870       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hx2mn" condition "Approved" to 2026-04-20 04:52:40.228850825 +0000 UTC m=+375.366463513
I0420 04:52:40.244224       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hx2mn" condition "Ready" to 2026-04-20 04:52:40.244207002 +0000 UTC m=+375.381819690
I0420 04:52:40.266932       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:52:40.266915252 +0000 UTC m=+375.404527910
I0420 04:52:40.286892       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:52:40.287090       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:52:40.287084094 +0000 UTC m=+375.424696752
I0420 04:52:40.294123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:52:40.304303       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:52:45.236367       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:52:45.236354775 +0000 UTC m=+380.373967423
I0420 04:53:28.879031       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:28.879126       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 04:53:28.87910315 +0000 UTC m=+424.016715788
I0420 04:53:28.879502       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 04:53:28.879484109 +0000 UTC m=+424.017096757
I0420 04:53:28.888423       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 04:53:28.888410871 +0000 UTC m=+424.026023519
I0420 04:53:28.888838       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:28.888879       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 04:53:28.888870941 +0000 UTC m=+424.026483589
I0420 04:53:28.901446       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 04:53:28.901429005 +0000 UTC m=+424.039041693
I0420 04:53:28.902327       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:28.904062       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 04:53:28.904043325 +0000 UTC m=+424.041655983
I0420 04:53:28.925301       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:28.925560       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 04:53:28.925532102 +0000 UTC m=+424.063144770
I0420 04:53:28.926788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:28.926882       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:28.926910       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 04:53:28.926902503 +0000 UTC m=+424.064515151
I0420 04:53:28.939739       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:28.939848       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 04:53:28.939837806 +0000 UTC m=+424.077450464
I0420 04:53:29.422618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:29.464221       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8wf47" condition "Approved" to 2026-04-20 04:53:29.457981974 +0000 UTC m=+424.595594612
I0420 04:53:29.476554       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4p4fk" condition "Approved" to 2026-04-20 04:53:29.476538614 +0000 UTC m=+424.614151272
I0420 04:53:29.487491       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:29.490064       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8wf47" condition "Ready" to 2026-04-20 04:53:29.490056149 +0000 UTC m=+424.627668797
I0420 04:53:29.497389       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4p4fk" condition "Ready" to 2026-04-20 04:53:29.497374265 +0000 UTC m=+424.634986923
I0420 04:53:29.528915       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hrk6n" condition "Approved" to 2026-04-20 04:53:29.528899728 +0000 UTC m=+424.666512376
I0420 04:53:29.537105       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:29.537091052 +0000 UTC m=+424.674703700
I0420 04:53:29.546004       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:29.545993504 +0000 UTC m=+424.683606152
I0420 04:53:29.552046       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hrk6n" condition "Ready" to 2026-04-20 04:53:29.552037861 +0000 UTC m=+424.689650509
I0420 04:53:29.565582       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:29.565963       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:29.565953536 +0000 UTC m=+424.703566204
I0420 04:53:29.637041       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:29.652280       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:29.652265147 +0000 UTC m=+424.789877805
I0420 04:53:30.100628       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:30.100604838 +0000 UTC m=+425.238217506
I0420 04:53:30.159724       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:30.335623       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:30.352199       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:30.352734       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:30.352726034 +0000 UTC m=+425.490338692
I0420 04:53:30.652007       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:30.700071       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:39.162295       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" condition "Ready" to 2026-04-20 04:53:39.162272394 +0000 UTC m=+434.299885042
I0420 04:53:39.162319       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:39.162642       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" condition "Issuing" to 2026-04-20 04:53:39.162631662 +0000 UTC m=+434.300244360
I0420 04:53:39.182373       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:39.182437       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:39.182464       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" condition "Issuing" to 2026-04-20 04:53:39.18245858 +0000 UTC m=+434.320071228
I0420 04:53:39.306903       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xzjnw-jdrmv" condition "Approved" to 2026-04-20 04:53:39.306885416 +0000 UTC m=+434.444498064
I0420 04:53:39.333094       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xzjnw-jdrmv" condition "Ready" to 2026-04-20 04:53:39.333082125 +0000 UTC m=+434.470694773
I0420 04:53:39.359708       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:39.359697463 +0000 UTC m=+434.497310121
I0420 04:53:39.384228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xzjnw-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:53.009318       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 04:53:53.009287203 +0000 UTC m=+448.146899861
I0420 04:53:53.009703       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:53.009811       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 04:53:53.009764792 +0000 UTC m=+448.147377450
I0420 04:53:53.026574       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:53.026645       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:53:53.026662       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 04:53:53.026655974 +0000 UTC m=+448.164268622
I0420 04:53:53.247175       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:53.252158       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cp8qj" condition "Approved" to 2026-04-20 04:53:53.252147109 +0000 UTC m=+448.389759767
I0420 04:53:53.282997       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cp8qj" condition "Ready" to 2026-04-20 04:53:53.282983339 +0000 UTC m=+448.420596017
I0420 04:53:53.322328       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:53.322316921 +0000 UTC m=+448.459929579
I0420 04:53:53.344693       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:53:53.410865       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:07.794368       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:57:07.794747       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 04:57:07.794415512 +0000 UTC m=+642.932028190
I0420 04:57:07.794761       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 04:57:07.794170067 +0000 UTC m=+642.931782755
I0420 04:57:07.811088       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:07.811157       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:57:07.811177       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 04:57:07.811170724 +0000 UTC m=+642.948783382
I0420 04:57:08.189666       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-85qzp" condition "Approved" to 2026-04-20 04:57:08.189655179 +0000 UTC m=+643.327267837
I0420 04:57:08.211451       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-85qzp" condition "Ready" to 2026-04-20 04:57:08.211441265 +0000 UTC m=+643.349053913
I0420 04:57:08.243799       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:08.24378056 +0000 UTC m=+643.381393218
I0420 04:57:08.271676       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:08.272946       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:08.27293869 +0000 UTC m=+643.410551338
I0420 04:57:08.289346       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:08.289740       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:08.289733742 +0000 UTC m=+643.427346390
I0420 04:57:49.072280       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 04:57:49.072267346 +0000 UTC m=+684.209880004
I0420 04:57:49.072319       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:57:49.072362       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 04:57:49.072356507 +0000 UTC m=+684.209969155
I0420 04:57:49.089502       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:49.089576       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0420 04:57:49.089598       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 04:57:49.08959215 +0000 UTC m=+684.227204808
I0420 04:57:49.493519       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n8lhk" condition "Approved" to 2026-04-20 04:57:49.493505321 +0000 UTC m=+684.631117969
I0420 04:57:49.519638       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n8lhk" condition "Ready" to 2026-04-20 04:57:49.519627142 +0000 UTC m=+684.657239800
I0420 04:57:49.547850       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:49.547806886 +0000 UTC m=+684.685419564
I0420 04:57:49.565514       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:49.565819       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:49.565814152 +0000 UTC m=+684.703426800
I0420 04:57:49.581723       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0420 04:57:49.592481       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"