I0613 01:03:55.600842       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0613 01:03:55.600962       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0613 01:03:55.601073       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0613 01:03:55.604878       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0613 01:03:55.605223       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0613 01:03:55.605608       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0613 01:03:55.605649       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0613 01:03:55.607887       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0613 01:03:55.622576       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0613 01:03:55.627996       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0613 01:03:55.634046       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0613 01:03:55.638259       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0613 01:03:55.640897       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0613 01:03:55.643507       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0613 01:03:55.645467       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0613 01:03:55.647399       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0613 01:03:55.649133       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0613 01:03:55.651699       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0613 01:03:55.651745       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0613 01:03:55.653523       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0613 01:03:55.658118       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0613 01:03:55.658209       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0613 01:03:55.662464       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0613 01:03:55.664681       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0613 01:03:55.664707       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0613 01:03:55.664751       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0613 01:03:55.666717       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0613 01:03:55.668718       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0613 01:03:55.670651       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0613 01:03:55.672571       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0613 01:03:55.674657       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0613 01:03:55.677422       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0613 01:03:55.678128       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0613 01:03:55.680455       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.683673       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.683964       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.709301       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.720342       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.739813       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.761776       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.776448       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.779289       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:03:55.798751       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0613 01:04:09.953966       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-13 01:04:09.953915232 +0000 UTC m=+14.386799053
I0613 01:04:10.698731       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-13 01:04:10.698713107 +0000 UTC m=+15.131596938
I0613 01:04:10.698960       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:04:10.699009       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-13 01:04:10.698998016 +0000 UTC m=+15.131881847
E0613 01:04:10.714876       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0613 01:04:10.715226       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-13 01:04:10.715215816 +0000 UTC m=+15.148099617
E0613 01:04:10.715416       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0613 01:04:10.716843       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:10.716914       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-13 01:04:10.716906065 +0000 UTC m=+15.149789866
E0613 01:04:10.724495       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0613 01:04:10.724872       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0613 01:04:10.724975       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0613 01:04:10.725047       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0613 01:04:10.736965       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:10.757261       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7clk" condition "Approved" to 2026-06-13 01:04:10.757251834 +0000 UTC m=+15.190135635
I0613 01:04:10.772428       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7clk" condition "Ready" to 2026-06-13 01:04:10.772409344 +0000 UTC m=+15.205293145
I0613 01:04:10.795041       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:04:10.79502441 +0000 UTC m=+15.227908201
I0613 01:04:10.810335       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:10.810538       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:04:10.810532819 +0000 UTC m=+15.243416610
I0613 01:04:10.828027       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:10.829392       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:15.725747       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:04:15.725728955 +0000 UTC m=+20.158612776
I0613 01:04:41.759326       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-13 01:04:41.759290078 +0000 UTC m=+46.192173879
I0613 01:04:41.759444       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:04:41.759503       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-13 01:04:41.759488492 +0000 UTC m=+46.192372303
I0613 01:04:41.773415       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-13 01:04:41.77340084 +0000 UTC m=+46.206284641
I0613 01:04:41.802596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:41.812331       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:04:41.812375       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-13 01:04:41.812364203 +0000 UTC m=+46.245248004
I0613 01:04:42.041463       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vbmnr" condition "Approved" to 2026-06-13 01:04:42.041440726 +0000 UTC m=+46.474324527
I0613 01:04:42.074645       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vbmnr" condition "Ready" to 2026-06-13 01:04:42.074623768 +0000 UTC m=+46.507507599
I0613 01:04:42.115736       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:04:42.11571658 +0000 UTC m=+46.548600381
I0613 01:04:42.156345       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:04:42.156678       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:04:42.156668089 +0000 UTC m=+46.589551890
I0613 01:04:42.196779       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:09:18.349325       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-06-13 01:09:18.349308726 +0000 UTC m=+322.782192527
I0613 01:09:18.349624       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:09:18.349789       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-06-13 01:09:18.349778929 +0000 UTC m=+322.782662740
I0613 01:09:18.369376       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:09:18.369435       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:09:18.369450       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-06-13 01:09:18.369445167 +0000 UTC m=+322.802328968
I0613 01:09:18.601339       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-vxmcz" condition "Approved" to 2026-06-13 01:09:18.601326718 +0000 UTC m=+323.034210539
I0613 01:09:18.624616       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-vxmcz" condition "Ready" to 2026-06-13 01:09:18.624608025 +0000 UTC m=+323.057491816
I0613 01:09:18.650210       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:09:18.650195725 +0000 UTC m=+323.083079536
I0613 01:09:18.665612       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:09:18.665852       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:09:18.665847433 +0000 UTC m=+323.098731234
I0613 01:09:18.681833       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:09:18.682145       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:09:18.682139589 +0000 UTC m=+323.115023390
I0613 01:10:23.942687       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:10:23.942723       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-13 01:10:23.9427158 +0000 UTC m=+388.375599611
I0613 01:10:23.943155       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-13 01:10:23.943150079 +0000 UTC m=+388.376033880
I0613 01:10:23.960489       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:10:23.960622       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:10:23.960655       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-13 01:10:23.960645636 +0000 UTC m=+388.393529437
E0613 01:10:23.964022       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0613 01:10:23.964055       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-13 01:10:23.964047329 +0000 UTC m=+388.396931120
E0613 01:10:23.964086       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0613 01:10:23.973540       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0613 01:10:23.974011       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0613 01:10:23.974082       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0613 01:10:23.974186       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0613 01:10:23.989805       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2pz22" condition "Approved" to 2026-06-13 01:10:23.989796765 +0000 UTC m=+388.422680566
I0613 01:10:24.001404       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2pz22" condition "Ready" to 2026-06-13 01:10:24.001396925 +0000 UTC m=+388.434280746
I0613 01:10:24.022127       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:10:24.02211478 +0000 UTC m=+388.454998611
I0613 01:10:24.047938       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:10:24.048069       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:10:24.048060357 +0000 UTC m=+388.480944138
I0613 01:10:28.975149       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:10:28.975135377 +0000 UTC m=+393.408019208
I0613 01:11:08.939174       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-13 01:11:08.93916444 +0000 UTC m=+433.372048231
I0613 01:11:08.939601       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:08.939633       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-13 01:11:08.939630149 +0000 UTC m=+433.372513940
I0613 01:11:08.940486       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:08.940500       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-13 01:11:08.940497006 +0000 UTC m=+433.373380797
I0613 01:11:08.945382       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-13 01:11:08.945362927 +0000 UTC m=+433.378246738
I0613 01:11:08.964524       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:08.964805       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-13 01:11:08.964791186 +0000 UTC m=+433.397674977
I0613 01:11:08.964554       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-13 01:11:08.964548421 +0000 UTC m=+433.397432212
I0613 01:11:09.000530       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.005131       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-13 01:11:09.005094521 +0000 UTC m=+433.437978412
I0613 01:11:09.010753       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.010835       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:09.014955       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-13 01:11:09.014936526 +0000 UTC m=+433.447820357
I0613 01:11:09.015494       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.015715       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-13 01:11:09.0157062 +0000 UTC m=+433.448590001
I0613 01:11:09.082265       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.111143       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sqb4s" condition "Approved" to 2026-06-13 01:11:09.111118554 +0000 UTC m=+433.544002405
I0613 01:11:09.133526       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sqb4s" condition "Ready" to 2026-06-13 01:11:09.133511828 +0000 UTC m=+433.566395659
I0613 01:11:09.180815       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:09.180804612 +0000 UTC m=+433.613688403
I0613 01:11:09.189608       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tcpfm" condition "Approved" to 2026-06-13 01:11:09.189594738 +0000 UTC m=+433.622478539
I0613 01:11:09.201050       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.202722       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:09.202706147 +0000 UTC m=+433.635589978
I0613 01:11:09.209267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tcpfm" condition "Ready" to 2026-06-13 01:11:09.20925689 +0000 UTC m=+433.642140691
I0613 01:11:09.211759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.223088       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.223432       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:09.223422259 +0000 UTC m=+433.656306060
I0613 01:11:09.335477       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:09.335460417 +0000 UTC m=+433.768344218
I0613 01:11:09.485078       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.485505       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:09.485493883 +0000 UTC m=+433.918377714
I0613 01:11:09.536703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.834336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:09.971611       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nxswn" condition "Approved" to 2026-06-13 01:11:09.971540745 +0000 UTC m=+434.404424576
I0613 01:11:10.180599       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nxswn" condition "Ready" to 2026-06-13 01:11:10.180584718 +0000 UTC m=+434.613468519
I0613 01:11:10.648857       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:10.64884267 +0000 UTC m=+435.081726491
I0613 01:11:10.763830       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:10.764712       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:10.764702336 +0000 UTC m=+435.197586127
I0613 01:11:10.944781       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:19.007317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:19.007393       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" condition "Issuing" to 2026-06-13 01:11:19.007383965 +0000 UTC m=+443.440267786
I0613 01:11:19.007905       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" condition "Ready" to 2026-06-13 01:11:19.007888584 +0000 UTC m=+443.440772375
I0613 01:11:19.022498       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nng7w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:19.022698       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" condition "Ready" to 2026-06-13 01:11:19.022689688 +0000 UTC m=+443.455573479
I0613 01:11:19.258040       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nng7w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:19.293485       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nng7w-78488" condition "Approved" to 2026-06-13 01:11:19.293463553 +0000 UTC m=+443.726347344
I0613 01:11:19.317104       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nng7w-78488" condition "Ready" to 2026-06-13 01:11:19.317092549 +0000 UTC m=+443.749976350
I0613 01:11:19.353011       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:19.35293657 +0000 UTC m=+443.785820371
I0613 01:11:19.383331       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nng7w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:19.383685       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:19.383676017 +0000 UTC m=+443.816559808
I0613 01:11:19.421154       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nng7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nng7w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:32.597855       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:11:32.597882       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-13 01:11:32.597875334 +0000 UTC m=+457.030759125
I0613 01:11:32.598184       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-13 01:11:32.598180431 +0000 UTC m=+457.031064222
I0613 01:11:32.618480       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:32.618565       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-13 01:11:32.618558785 +0000 UTC m=+457.051442566
I0613 01:11:32.859598       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:32.897574       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pg99c" condition "Approved" to 2026-06-13 01:11:32.897559941 +0000 UTC m=+457.330443732
I0613 01:11:32.927391       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pg99c" condition "Ready" to 2026-06-13 01:11:32.927379365 +0000 UTC m=+457.360263156
I0613 01:11:32.971898       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:11:32.971883852 +0000 UTC m=+457.404767663
I0613 01:11:32.989338       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:11:33.028448       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:14:56.000675       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-13 01:14:56.000646544 +0000 UTC m=+660.433530385
I0613 01:14:56.000779       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:14:56.001009       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-13 01:14:56.001000659 +0000 UTC m=+660.433884530
I0613 01:14:56.024123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:14:56.024219       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:14:56.024244       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-13 01:14:56.024238411 +0000 UTC m=+660.457122212
I0613 01:14:56.619048       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:14:56.631679       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bzcvc" condition "Approved" to 2026-06-13 01:14:56.631665177 +0000 UTC m=+661.064548978
I0613 01:14:56.659679       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bzcvc" condition "Ready" to 2026-06-13 01:14:56.659669405 +0000 UTC m=+661.092553186
I0613 01:14:56.699396       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:14:56.699374114 +0000 UTC m=+661.132257915
I0613 01:14:56.722544       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:14:56.722969       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:14:56.722961141 +0000 UTC m=+661.155844942
I0613 01:14:56.752102       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:15:38.296840       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:15:38.296915       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-13 01:15:38.296905195 +0000 UTC m=+702.729789026
I0613 01:15:38.297381       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-13 01:15:38.297369701 +0000 UTC m=+702.730253522
I0613 01:15:38.327439       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:15:38.327499       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0613 01:15:38.327513       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-13 01:15:38.327509321 +0000 UTC m=+702.760393122
I0613 01:15:38.652605       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:15:38.669872       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-x6k82" condition "Approved" to 2026-06-13 01:15:38.669861325 +0000 UTC m=+703.102745126
I0613 01:15:38.689286       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-x6k82" condition "Ready" to 2026-06-13 01:15:38.689276428 +0000 UTC m=+703.122160219
I0613 01:15:38.717588       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:15:38.717579132 +0000 UTC m=+703.150462923
I0613 01:15:38.738443       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:15:38.738902       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-13 01:15:38.738897322 +0000 UTC m=+703.171781113
I0613 01:15:38.745945       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0613 01:15:38.764241       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"