I0726 08:57:42.244982       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0726 08:57:42.245245       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0726 08:57:42.252215       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0726 08:57:42.252274       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0726 08:57:42.252291       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0726 08:57:42.252886       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0726 08:57:42.252927       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0726 08:57:42.253001       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0726 08:57:42.257488       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0726 08:57:42.273795       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0726 08:57:42.281266       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0726 08:57:42.287824       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0726 08:57:42.289612       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0726 08:57:42.289632       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0726 08:57:42.289635       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0726 08:57:42.291433       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0726 08:57:42.291534       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0726 08:57:42.293335       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0726 08:57:42.295246       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0726 08:57:42.298293       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0726 08:57:42.303571       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0726 08:57:42.307877       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0726 08:57:42.310250       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0726 08:57:42.310350       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0726 08:57:42.313002       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0726 08:57:42.315292       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0726 08:57:42.317135       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0726 08:57:42.318975       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0726 08:57:42.324834       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0726 08:57:42.327641       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0726 08:57:42.330255       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0726 08:57:42.330304       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0726 08:57:42.330305       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0726 08:57:42.332609       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0726 08:57:42.335637       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.336038       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.336317       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.336419       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.338351       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.362716       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.380976       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.398570       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.414435       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.432369       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:42.448110       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0726 08:57:59.716863       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-26 08:57:59.716831882 +0000 UTC m=+17.500186170
I0726 08:58:00.492169       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-26 08:58:00.492151681 +0000 UTC m=+18.275505969
I0726 08:58:00.492188       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 08:58:00.492490       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-26 08:58:00.49247325 +0000 UTC m=+18.275827528
E0726 08:58:00.504704       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0726 08:58:00.504802       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-26 08:58:00.504795238 +0000 UTC m=+18.288149506
E0726 08:58:00.504822       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0726 08:58:00.505637       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:00.505712       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 08:58:00.505782       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-26 08:58:00.505773494 +0000 UTC m=+18.289127792
E0726 08:58:00.518950       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0726 08:58:00.519079       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0726 08:58:00.519195       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0726 08:58:00.519237       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0726 08:58:00.561632       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-26 08:58:00.561615061 +0000 UTC m=+18.344969339
I0726 08:58:00.583795       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-26 08:58:00.583769125 +0000 UTC m=+18.367123423
I0726 08:58:00.615191       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 08:58:00.615174528 +0000 UTC m=+18.398528826
I0726 08:58:00.630598       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:00.631119       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 08:58:00.631109761 +0000 UTC m=+18.414464039
I0726 08:58:00.640639       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:00.643659       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:05.520321       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 08:58:05.52030427 +0000 UTC m=+23.303658528
I0726 08:58:05.828285       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 08:58:05.828342       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-26 08:58:05.828334407 +0000 UTC m=+23.611688665
I0726 08:58:05.828475       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-26 08:58:05.82845876 +0000 UTC m=+23.611813038
I0726 08:58:05.837148       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-26 08:58:05.837139115 +0000 UTC m=+23.620493373
I0726 08:58:05.842482       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:05.842646       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 08:58:05.842672       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-26 08:58:05.842665558 +0000 UTC m=+23.626019816
I0726 08:58:06.176243       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-26 08:58:06.176224957 +0000 UTC m=+23.959579225
I0726 08:58:06.211552       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-26 08:58:06.211541382 +0000 UTC m=+23.994895650
I0726 08:58:06.237006       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 08:58:06.236989191 +0000 UTC m=+24.020343479
I0726 08:58:06.250010       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0726 08:58:06.250695       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 08:58:06.250690586 +0000 UTC m=+24.034044844
I0726 08:58:06.261297       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:02:17.569843       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 09:02:17.569912       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-07-26 09:02:17.569901773 +0000 UTC m=+275.353256061
I0726 09:02:17.570318       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-26 09:02:17.570311222 +0000 UTC m=+275.353665520
I0726 09:02:17.581684       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:02:17.581818       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-26 09:02:17.581807594 +0000 UTC m=+275.365161872
I0726 09:02:17.749286       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:02:17.781174       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Approved" to 2026-07-26 09:02:17.78115392 +0000 UTC m=+275.564508178
I0726 09:02:17.800508       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Ready" to 2026-07-26 09:02:17.800491207 +0000 UTC m=+275.583845495
I0726 09:02:17.828230       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 09:02:17.828212951 +0000 UTC m=+275.611567249
I0726 09:02:17.840984       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:02:17.841606       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 09:02:17.841595892 +0000 UTC m=+275.624950160
I0726 09:02:17.857494       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:05:14.824181       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 09:05:14.824382       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-26 09:05:14.824367624 +0000 UTC m=+452.607721892
I0726 09:05:14.824587       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-26 09:05:14.824562948 +0000 UTC m=+452.607917236
I0726 09:05:14.838270       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:05:14.838390       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 09:05:14.838430       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-26 09:05:14.838417233 +0000 UTC m=+452.621771521
I0726 09:05:15.006914       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-26 09:05:15.00689779 +0000 UTC m=+452.790252048
I0726 09:05:15.022136       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-26 09:05:15.022119282 +0000 UTC m=+452.805473580
I0726 09:05:15.044287       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 09:05:15.044273528 +0000 UTC m=+452.827627786
I0726 09:05:15.055852       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:05:15.090959       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:06:59.024303       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0726 09:06:59.024374       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-26 09:06:59.024364676 +0000 UTC m=+556.807718934
I0726 09:06:59.024435       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-26 09:06:59.024412247 +0000 UTC m=+556.807766515
I0726 09:06:59.040887       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:06:59.041051       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-26 09:06:59.041031608 +0000 UTC m=+556.824385926
I0726 09:06:59.276487       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0726 09:06:59.312355       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-26 09:06:59.312332383 +0000 UTC m=+557.095686681
I0726 09:06:59.327883       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-26 09:06:59.327867491 +0000 UTC m=+557.111221759
I0726 09:06:59.349703       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-26 09:06:59.349683859 +0000 UTC m=+557.133038147
I0726 09:06:59.365398       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"