I0406 18:39:27.974862 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0406 18:39:27.974948 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0406 18:39:27.975111 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0406 18:39:27.978644 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0406 18:39:27.978946 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0406 18:39:27.979261 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0406 18:39:27.979456 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0406 18:39:27.983002 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0406 18:39:27.995059 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0406 18:39:27.999380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0406 18:39:28.003503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0406 18:39:28.005856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0406 18:39:28.008192 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0406 18:39:28.008220 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0406 18:39:28.008229 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0406 18:39:28.009763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0406 18:39:28.011825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0406 18:39:28.011925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0406 18:39:28.014512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0406 18:39:28.016964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0406 18:39:28.019470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0406 18:39:28.021381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0406 18:39:28.023243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0406 18:39:28.024853 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0406 18:39:28.025119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0406 18:39:28.030594 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0406 18:39:28.034467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0406 18:39:28.037372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0406 18:39:28.038925 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0406 18:39:28.039061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0406 18:39:28.040946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0406 18:39:28.042766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0406 18:39:28.044792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0406 18:39:28.047177 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.048015 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.048563 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.064297 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.075904 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.087800 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.108741 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.122905 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.136459 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:28.143128 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 18:39:45.544684 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-06 18:39:45.544641861 +0000 UTC m=+17.601046318 I0406 18:39:46.251385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:39:46.251478 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 18:39:46.251466931 +0000 UTC m=+18.307871388 I0406 18:39:46.251380 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 18:39:46.251363318 +0000 UTC m=+18.307767775 I0406 18:39:46.264900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:39:46.265037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:39:46.265100 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 18:39:46.265093016 +0000 UTC m=+18.321497443 E0406 18:39:46.267521 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 18:39:46.267583 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-06 18:39:46.267578062 +0000 UTC m=+18.323982489 E0406 18:39:46.267602 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 18:39:46.281625 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0406 18:39:46.281821 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 18:39:46.281938 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 18:39:46.282065 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0406 18:39:46.295983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:39:46.301538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wz2pw" condition "Approved" to 2026-04-06 18:39:46.301527474 +0000 UTC m=+18.357931901 I0406 18:39:46.315741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wz2pw" condition "Ready" to 2026-04-06 18:39:46.315729249 +0000 UTC m=+18.372133676 I0406 18:39:46.336748 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:39:46.33673098 +0000 UTC m=+18.393135427 I0406 18:39:46.352618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:39:46.352984 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:39:46.352976036 +0000 UTC m=+18.409380473 I0406 18:39:46.367930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:39:51.282741 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:39:51.282719675 +0000 UTC m=+23.339124132 I0406 18:40:12.464869 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 18:40:12.464834314 +0000 UTC m=+44.521238741 I0406 18:40:12.465248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:40:12.465308 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 18:40:12.465303297 +0000 UTC m=+44.521707724 I0406 18:40:12.487321 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-06 18:40:12.487306153 +0000 UTC m=+44.543710600 I0406 18:40:12.496299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:40:12.496355 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:40:12.496379 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 18:40:12.496374562 +0000 UTC m=+44.552778979 I0406 18:40:12.717144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-87pvg" condition "Approved" to 2026-04-06 18:40:12.715193275 +0000 UTC m=+44.771597712 I0406 18:40:12.751503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-87pvg" condition "Ready" to 2026-04-06 18:40:12.751487844 +0000 UTC m=+44.807892281 I0406 18:40:12.785677 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:40:12.785648855 +0000 UTC m=+44.842053282 I0406 18:40:12.808455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:40:12.808732 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:40:12.80872533 +0000 UTC m=+44.865129757 I0406 18:40:12.830026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:40:12.834092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:40:12.834412 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:40:12.834403997 +0000 UTC m=+44.890808414 I0406 18:44:18.178178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:44:18.178206 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-06 18:44:18.178200018 +0000 UTC m=+290.234604445 I0406 18:44:18.178453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-06 18:44:18.178448404 +0000 UTC m=+290.234852821 I0406 18:44:18.193647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:44:18.193916 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-06 18:44:18.193729808 +0000 UTC m=+290.250134255 I0406 18:44:18.302312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:44:18.345065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-v2r5j" condition "Approved" to 2026-04-06 18:44:18.345050889 +0000 UTC m=+290.401455336 I0406 18:44:18.381246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-v2r5j" condition "Ready" to 2026-04-06 18:44:18.381234635 +0000 UTC m=+290.437639062 I0406 18:44:18.403605 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:44:18.403596471 +0000 UTC m=+290.460000898 I0406 18:44:18.421200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:44:18.421507 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:44:18.42150265 +0000 UTC m=+290.477907077 I0406 18:44:18.426013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:44:18.439059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:45:21.177868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:45:21.177915 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 18:45:21.177896604 +0000 UTC m=+353.234301051 I0406 18:45:21.177919 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-06 18:45:21.177908165 +0000 UTC m=+353.234312622 E0406 18:45:21.189479 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 18:45:21.189514 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-06 18:45:21.189506174 +0000 UTC m=+353.245910611 E0406 18:45:21.189563 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 18:45:21.190542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:45:21.190625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 18:45:21.190607957 +0000 UTC m=+353.247020784 E0406 18:45:21.199308 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0406 18:45:21.199418 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 18:45:21.199450 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 18:45:21.199611 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0406 18:45:21.205099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:45:21.224491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j9l88" condition "Approved" to 2026-04-06 18:45:21.224478476 +0000 UTC m=+353.280882923 I0406 18:45:21.236809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j9l88" condition "Ready" to 2026-04-06 18:45:21.23679466 +0000 UTC m=+353.293199107 I0406 18:45:21.257630 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:45:21.257619619 +0000 UTC m=+353.314024066 I0406 18:45:21.275841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:45:26.200399 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:45:26.200386475 +0000 UTC m=+358.256790932 I0406 18:46:05.328010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.328069 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 18:46:05.328063737 +0000 UTC m=+397.384468164 I0406 18:46:05.328319 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-06 18:46:05.328314462 +0000 UTC m=+397.384718889 I0406 18:46:05.336752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-06 18:46:05.336744081 +0000 UTC m=+397.393148508 I0406 18:46:05.337129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.337152 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 18:46:05.337148359 +0000 UTC m=+397.393552786 I0406 18:46:05.350557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.350587 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 18:46:05.350582692 +0000 UTC m=+397.406987109 I0406 18:46:05.350788 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-06 18:46:05.350784736 +0000 UTC m=+397.407189153 I0406 18:46:05.360898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:05.360943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.360960 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 18:46:05.360957578 +0000 UTC m=+397.417361985 I0406 18:46:05.363025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:05.363081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.363107 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 18:46:05.363102249 +0000 UTC m=+397.419506676 I0406 18:46:05.367877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:05.367918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.367929 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 18:46:05.36792448 +0000 UTC m=+397.424328897 I0406 18:46:05.513191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sv726" condition "Approved" to 2026-04-06 18:46:05.513178272 +0000 UTC m=+397.569582699 I0406 18:46:05.534202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sv726" condition "Ready" to 2026-04-06 18:46:05.534187338 +0000 UTC m=+397.590591795 I0406 18:46:05.597473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:05.597550 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 18:46:05.597544244 +0000 UTC m=+397.653948671 I0406 18:46:05.619617 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:05.619608581 +0000 UTC m=+397.676012998 I0406 18:46:05.629666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:05.647423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fq2ng" condition "Approved" to 2026-04-06 18:46:05.647411655 +0000 UTC m=+397.703816082 I0406 18:46:05.651687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:05.651890 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:05.65188396 +0000 UTC m=+397.708288377 I0406 18:46:05.668840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hcl4f" condition "Approved" to 2026-04-06 18:46:05.66882899 +0000 UTC m=+397.725233407 I0406 18:46:05.675130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fq2ng" condition "Ready" to 2026-04-06 18:46:05.675118278 +0000 UTC m=+397.731522705 I0406 18:46:05.705379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hcl4f" condition "Ready" to 2026-04-06 18:46:05.70536867 +0000 UTC m=+397.761773087 E0406 18:46:06.212300 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-9xhxh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0406 18:46:06.334965 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:06.334953993 +0000 UTC m=+398.391358410 I0406 18:46:06.623889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:06.624233 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:06.624226875 +0000 UTC m=+398.680631302 I0406 18:46:06.733668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:06.786735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5kfps" condition "Approved" to 2026-04-06 18:46:06.786724057 +0000 UTC m=+398.843128484 I0406 18:46:07.224155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5kfps" condition "Ready" to 2026-04-06 18:46:07.224144632 +0000 UTC m=+399.280549069 I0406 18:46:07.517856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:07.566054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:07.620527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:07.916158 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:07.916145429 +0000 UTC m=+399.972549866 I0406 18:46:08.017616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:08.315195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:13.385438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:13.385485 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" condition "Issuing" to 2026-04-06 18:46:13.385478822 +0000 UTC m=+405.441883249 I0406 18:46:13.385526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" condition "Ready" to 2026-04-06 18:46:13.385511453 +0000 UTC m=+405.441915930 I0406 18:46:13.403792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:13.403898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:13.403921 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" condition "Issuing" to 2026-04-06 18:46:13.403914086 +0000 UTC m=+405.460318513 I0406 18:46:13.625783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmqfk-m64fm" condition "Approved" to 2026-04-06 18:46:13.625771837 +0000 UTC m=+405.682176244 I0406 18:46:13.654163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmqfk-m64fm" condition "Ready" to 2026-04-06 18:46:13.654152315 +0000 UTC m=+405.710556732 I0406 18:46:13.689458 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:13.689445562 +0000 UTC m=+405.745849989 I0406 18:46:13.710478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmqfk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:25.585043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:25.585076 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 18:46:25.585069238 +0000 UTC m=+417.641473665 I0406 18:46:25.585400 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-06 18:46:25.585299862 +0000 UTC m=+417.641704309 I0406 18:46:25.599529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:25.599573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:46:25.599584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 18:46:25.599581083 +0000 UTC m=+417.655985500 I0406 18:46:25.937923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tc6nk" condition "Approved" to 2026-04-06 18:46:25.93789867 +0000 UTC m=+417.994303127 I0406 18:46:25.968366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tc6nk" condition "Ready" to 2026-04-06 18:46:25.968354036 +0000 UTC m=+418.024758463 I0406 18:46:26.018988 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:46:26.0189757 +0000 UTC m=+418.075380127 I0406 18:46:26.078076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:46:26.131084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:49:41.945074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:49:41.945137 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-06 18:49:41.945130329 +0000 UTC m=+614.001534746 I0406 18:49:41.945407 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 18:49:41.945402504 +0000 UTC m=+614.001806931 I0406 18:49:41.963618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:49:41.963691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 18:49:41.963683866 +0000 UTC m=+614.020088293 I0406 18:49:42.393819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:49:42.427793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6cbw" condition "Approved" to 2026-04-06 18:49:42.427782814 +0000 UTC m=+614.484187241 I0406 18:49:42.444263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6cbw" condition "Ready" to 2026-04-06 18:49:42.444250768 +0000 UTC m=+614.500655175 I0406 18:49:42.469359 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:49:42.469342645 +0000 UTC m=+614.525747092 I0406 18:49:42.490237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:49:42.491047 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:49:42.491039509 +0000 UTC m=+614.547443946 I0406 18:49:42.508713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:50:24.185425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:50:24.185490 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-06 18:50:24.185485363 +0000 UTC m=+656.241889780 I0406 18:50:24.184022 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-06 18:50:24.1840077 +0000 UTC m=+656.240412137 I0406 18:50:24.200670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:50:24.200774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 18:50:24.200849 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-06 18:50:24.200841956 +0000 UTC m=+656.257246373 I0406 18:50:24.357464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mqrxl" condition "Approved" to 2026-04-06 18:50:24.357451914 +0000 UTC m=+656.413856331 I0406 18:50:24.381247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mqrxl" condition "Ready" to 2026-04-06 18:50:24.381228085 +0000 UTC m=+656.437632502 I0406 18:50:24.411739 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:50:24.411728048 +0000 UTC m=+656.468132465 I0406 18:50:24.432799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:50:24.433068 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 18:50:24.433062982 +0000 UTC m=+656.489467389 I0406 18:50:24.450765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 18:50:24.453614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"