I0728 15:42:41.693498 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 15:42:41.693631 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 15:42:41.696657 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 15:42:41.696679 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0728 15:42:41.696688 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0728 15:42:41.697015 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0728 15:42:41.699292 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 15:42:41.699333 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 15:42:41.699408 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 15:42:41.750356 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 15:42:41.756714 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 15:42:41.757859 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 15:42:41.759913 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0728 15:42:41.761558 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 15:42:41.761576 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 15:42:41.761739 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 15:42:41.764325 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 15:42:41.766856 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 15:42:41.768473 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 15:42:41.768488 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 15:42:41.768572 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 15:42:41.770212 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 15:42:41.772113 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 15:42:41.773848 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 15:42:41.775508 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 15:42:41.780246 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 15:42:41.783991 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 15:42:41.786449 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 15:42:41.788151 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 15:42:41.789883 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 15:42:41.791705 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 15:42:41.793403 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 15:42:41.793418 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 15:42:41.793744 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 15:42:41.798240 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.798265 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.800014 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.800292 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.800798 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.822911 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.838197 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.859869 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.874934 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.894453 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:41.911952 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 15:42:54.136539 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 15:42:54.136503419 +0000 UTC m=+12.468921965 I0728 15:42:54.900595 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 15:42:54.900581971 +0000 UTC m=+13.233000517 I0728 15:42:54.901052 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:42:54.901117 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 15:42:54.9011111 +0000 UTC m=+13.233529656 I0728 15:42:54.921911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0728 15:42:54.921953 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 15:42:54.922012 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:42:54.922025 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 15:42:54.922015103 +0000 UTC m=+13.254433629 E0728 15:42:54.922049 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 15:42:54.922043 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 15:42:54.922034294 +0000 UTC m=+13.254452810 E0728 15:42:54.936453 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0728 15:42:54.936690 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 15:42:54.936735 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 15:42:54.936824 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0728 15:42:54.957147 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:42:54.975103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-28 15:42:54.975086705 +0000 UTC m=+13.307505251 I0728 15:42:55.000127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-28 15:42:55.000105566 +0000 UTC m=+13.332524152 I0728 15:42:55.024224 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:42:55.024198651 +0000 UTC m=+13.356617197 I0728 15:42:55.038430 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:42:55.039031 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:42:55.039018434 +0000 UTC m=+13.371436980 I0728 15:42:55.057824 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:42:55.058380 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:42:55.058365311 +0000 UTC m=+13.390783837 I0728 15:42:59.937579 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:42:59.937544242 +0000 UTC m=+18.269962798 I0728 15:43:23.534456 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 15:43:23.533893213 +0000 UTC m=+41.866311739 I0728 15:43:23.536771 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:43:23.536966 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 15:43:23.53695009 +0000 UTC m=+41.869368636 I0728 15:43:23.560002 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:43:23.560468 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 15:43:23.560439417 +0000 UTC m=+41.892857933 I0728 15:43:23.562045 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:43:23.562108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 15:43:23.562095673 +0000 UTC m=+41.894514199 I0728 15:43:23.795464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-28 15:43:23.795442906 +0000 UTC m=+42.127861462 I0728 15:43:23.828363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-28 15:43:23.828352037 +0000 UTC m=+42.160770563 I0728 15:43:23.854056 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:43:23.854040798 +0000 UTC m=+42.186459324 I0728 15:43:23.876222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:43:23.886919 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:43:23.938108 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:47:33.082924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-07-28 15:47:33.082887713 +0000 UTC m=+291.415306239 I0728 15:47:33.082908 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:47:33.083004 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-07-28 15:47:33.082992245 +0000 UTC m=+291.415410791 I0728 15:47:33.097700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:47:33.097814 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-07-28 15:47:33.097798947 +0000 UTC m=+291.430217503 I0728 15:47:33.348657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:47:33.381579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-1" condition "Approved" to 2026-07-28 15:47:33.381565479 +0000 UTC m=+291.713984005 I0728 15:47:33.399478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-1" condition "Ready" to 2026-07-28 15:47:33.399466297 +0000 UTC m=+291.731884813 I0728 15:47:33.423724 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:47:33.423624472 +0000 UTC m=+291.756042988 I0728 15:47:33.438511 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:47:33.473926 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.329857 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 15:48:39.32982004 +0000 UTC m=+357.662238586 I0728 15:48:39.330420 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:48:39.330618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 15:48:39.330603385 +0000 UTC m=+357.663021941 E0728 15:48:39.342861 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 15:48:39.342928 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 15:48:39.342921345 +0000 UTC m=+357.675339871 E0728 15:48:39.342948 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 15:48:39.344539 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.344678 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 15:48:39.344654118 +0000 UTC m=+357.677072674 E0728 15:48:39.364974 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0728 15:48:39.365072 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 15:48:39.365104 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 15:48:39.365144 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0728 15:48:39.368061 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.376040 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.403723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-28 15:48:39.403708594 +0000 UTC m=+357.736127120 I0728 15:48:39.417456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-28 15:48:39.417446931 +0000 UTC m=+357.749865457 I0728 15:48:39.439454 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:48:39.439440787 +0000 UTC m=+357.771859303 I0728 15:48:39.453661 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.454164 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:48:39.454154563 +0000 UTC m=+357.786573089 I0728 15:48:39.460699 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.467023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:39.467313 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:48:39.467305978 +0000 UTC m=+357.799724484 I0728 15:48:39.467605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:48:44.366048 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:48:44.366027604 +0000 UTC m=+362.698446160 I0728 15:49:29.218656 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 15:49:29.218613895 +0000 UTC m=+407.551032411 I0728 15:49:29.218947 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:29.218999 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 15:49:29.218995932 +0000 UTC m=+407.551414438 I0728 15:49:29.247564 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 15:49:29.247551905 +0000 UTC m=+407.579970431 I0728 15:49:29.249664 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:29.249714 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 15:49:29.249702754 +0000 UTC m=+407.582121280 I0728 15:49:29.252481 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 15:49:29.252458395 +0000 UTC m=+407.584876921 I0728 15:49:29.254107 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:29.254144 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 15:49:29.254138195 +0000 UTC m=+407.586556721 I0728 15:49:29.254328 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.254371 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:29.254390 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 15:49:29.25438684 +0000 UTC m=+407.586805366 I0728 15:49:29.272013 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.276721 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.280289 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 15:49:29.280275174 +0000 UTC m=+407.612693680 I0728 15:49:29.280519 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:29.280537 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 15:49:29.280533948 +0000 UTC m=+407.612952464 I0728 15:49:29.498018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.550995 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.568361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-28 15:49:29.568346495 +0000 UTC m=+407.900765021 I0728 15:49:29.570368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-28 15:49:29.570362391 +0000 UTC m=+407.902780917 I0728 15:49:29.591607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-28 15:49:29.59159648 +0000 UTC m=+407.924014986 I0728 15:49:29.592815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-28 15:49:29.592811602 +0000 UTC m=+407.925230118 I0728 15:49:29.624620 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:29.624603284 +0000 UTC m=+407.957021810 I0728 15:49:29.632247 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:29.632207303 +0000 UTC m=+407.964625819 I0728 15:49:29.640766 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.641967 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:29.641963062 +0000 UTC m=+407.974381568 I0728 15:49:29.646250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-28 15:49:29.64624187 +0000 UTC m=+407.978660386 I0728 15:49:29.654342 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:29.870145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-28 15:49:29.870131456 +0000 UTC m=+408.202549982 I0728 15:49:30.222641 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:30.519690 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:30.519667651 +0000 UTC m=+408.852086167 I0728 15:49:30.715468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:30.716452 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:30.716441318 +0000 UTC m=+409.048859874 I0728 15:49:30.962163 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:31.014549 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:39.183843 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:39.183883 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r4css-tls" condition "Issuing" to 2026-07-28 15:49:39.183872745 +0000 UTC m=+417.516291271 I0728 15:49:39.183906 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r4css-tls" condition "Ready" to 2026-07-28 15:49:39.183882985 +0000 UTC m=+417.516301541 I0728 15:49:39.196746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r4css-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:39.196862 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r4css-tls" condition "Ready" to 2026-07-28 15:49:39.19684962 +0000 UTC m=+417.529268166 I0728 15:49:39.502606 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r4css-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:39.534632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r4css-tls-1" condition "Approved" to 2026-07-28 15:49:39.534613901 +0000 UTC m=+417.867032427 I0728 15:49:39.555183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r4css-tls-1" condition "Ready" to 2026-07-28 15:49:39.555169854 +0000 UTC m=+417.887588360 I0728 15:49:39.593256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r4css-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:39.593238494 +0000 UTC m=+417.925657020 I0728 15:49:39.611968 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r4css-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:39.649541 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r4css-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:39.664228 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r4css-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r4css-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:51.903991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 15:49:51.903976841 +0000 UTC m=+430.236395357 I0728 15:49:51.904332 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:49:51.904372 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 15:49:51.904368298 +0000 UTC m=+430.236786814 I0728 15:49:51.914294 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:51.914370 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 15:49:51.914366397 +0000 UTC m=+430.246784913 I0728 15:49:52.121746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:52.147076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-28 15:49:52.147058118 +0000 UTC m=+430.479476664 I0728 15:49:52.168358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-28 15:49:52.168344919 +0000 UTC m=+430.500763435 I0728 15:49:52.199184 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:49:52.199169531 +0000 UTC m=+430.531588057 I0728 15:49:52.212451 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:49:52.253630 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:08.028259 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 15:53:08.028241517 +0000 UTC m=+626.360660033 I0728 15:53:08.028369 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:53:08.028978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 15:53:08.028965439 +0000 UTC m=+626.361384045 I0728 15:53:08.040442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:08.040560 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:53:08.040601 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 15:53:08.04059303 +0000 UTC m=+626.373011556 I0728 15:53:08.194927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-28 15:53:08.194916122 +0000 UTC m=+626.527334638 I0728 15:53:08.216777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-28 15:53:08.21676366 +0000 UTC m=+626.549182186 I0728 15:53:08.239029 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:53:08.239015645 +0000 UTC m=+626.571434191 I0728 15:53:08.253884 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:08.254440 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:53:08.254433208 +0000 UTC m=+626.586851734 I0728 15:53:08.264052 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:08.269956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:52.372904 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 15:53:52.372888447 +0000 UTC m=+670.705306953 I0728 15:53:52.373743 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:53:52.375033 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 15:53:52.373806362 +0000 UTC m=+670.706224888 I0728 15:53:52.392844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:52.392935 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:53:52.392957 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 15:53:52.392952457 +0000 UTC m=+670.725370983 I0728 15:53:52.697492 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:52.722376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-28 15:53:52.72235775 +0000 UTC m=+671.054776266 I0728 15:53:52.736316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-28 15:53:52.736302458 +0000 UTC m=+671.068720964 I0728 15:53:52.771203 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:53:52.77118641 +0000 UTC m=+671.103604966 I0728 15:53:52.791068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:52.791971 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:53:52.791962277 +0000 UTC m=+671.124380813 I0728 15:53:52.797703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:53:52.810074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"