I0717 18:02:11.338284       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0717 18:02:11.338400       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0717 18:02:11.338482       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0717 18:02:11.343875       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0717 18:02:11.344294       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0717 18:02:11.344297       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0717 18:02:11.344354       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0717 18:02:11.346742       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0717 18:02:11.358431       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0717 18:02:11.361707       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0717 18:02:11.367267       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0717 18:02:11.367430       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0717 18:02:11.367332       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0717 18:02:11.371692       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0717 18:02:11.375497       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0717 18:02:11.377176       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0717 18:02:11.378950       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0717 18:02:11.380793       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0717 18:02:11.380877       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0717 18:02:11.384728       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0717 18:02:11.387463       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0717 18:02:11.389291       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0717 18:02:11.390949       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0717 18:02:11.392677       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0717 18:02:11.394378       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0717 18:02:11.396068       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0717 18:02:11.396086       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0717 18:02:11.396094       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0717 18:02:11.396101       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0717 18:02:11.397885       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0717 18:02:11.399452       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0717 18:02:11.404851       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0717 18:02:11.408204       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0717 18:02:11.411263       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.411553       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.411587       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.412085       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.429055       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.447514       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.461404       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.476967       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.490068       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:11.502578       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0717 18:02:25.323525       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-17 18:02:25.32350556 +0000 UTC m=+14.015993240
I0717 18:02:26.013323       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:02:26.013376       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 18:02:26.013366057 +0000 UTC m=+14.705853727
I0717 18:02:26.013983       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 18:02:26.013971281 +0000 UTC m=+14.706458931
E0717 18:02:26.032294       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0717 18:02:26.032422       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-17 18:02:26.032414255 +0000 UTC m=+14.724901895
E0717 18:02:26.032505       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0717 18:02:26.034271       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:26.034336       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:02:26.034364       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 18:02:26.03435906 +0000 UTC m=+14.726846710
E0717 18:02:26.051250       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0717 18:02:26.054166       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0717 18:02:26.054340       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0717 18:02:26.054511       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0717 18:02:26.078491       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:26.082868       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlx6b" condition "Approved" to 2026-07-17 18:02:26.082861186 +0000 UTC m=+14.775348826
I0717 18:02:26.098356       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlx6b" condition "Ready" to 2026-07-17 18:02:26.098347842 +0000 UTC m=+14.790835492
I0717 18:02:26.121125       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:02:26.121110887 +0000 UTC m=+14.813598557
I0717 18:02:26.138960       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:26.139285       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:02:26.139275675 +0000 UTC m=+14.831763355
I0717 18:02:26.150594       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:26.150874       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:02:26.150868591 +0000 UTC m=+14.843356231
I0717 18:02:26.152809       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:26.157847       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:31.052548       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:02:31.052530723 +0000 UTC m=+19.745018393
I0717 18:02:54.771991       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:02:54.771924136 +0000 UTC m=+43.464411786
I0717 18:02:54.772023       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:02:54.772056       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 18:02:54.772048889 +0000 UTC m=+43.464536539
I0717 18:02:54.784368       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-17 18:02:54.784347046 +0000 UTC m=+43.476834696
I0717 18:02:54.796050       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:54.799360       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:02:54.799350827 +0000 UTC m=+43.491838457
I0717 18:02:55.051572       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:02:55.088970       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9gmbs" condition "Approved" to 2026-07-17 18:02:55.088957563 +0000 UTC m=+43.781445203
I0717 18:02:55.120811       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9gmbs" condition "Ready" to 2026-07-17 18:02:55.120800219 +0000 UTC m=+43.813287869
I0717 18:02:55.156949       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:02:55.156936722 +0000 UTC m=+43.849424372
I0717 18:02:55.178380       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:07:55.318203       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:07:55.318285       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-07-17 18:07:55.318246207 +0000 UTC m=+344.010733837
I0717 18:07:55.318770       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-07-17 18:07:55.318765479 +0000 UTC m=+344.011253119
I0717 18:07:55.337004       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:07:55.337325       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-07-17 18:07:55.337313257 +0000 UTC m=+344.029800907
I0717 18:07:55.586132       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:07:55.614253       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-spbbw" condition "Approved" to 2026-07-17 18:07:55.614232525 +0000 UTC m=+344.306720195
I0717 18:07:55.640354       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-spbbw" condition "Ready" to 2026-07-17 18:07:55.640330885 +0000 UTC m=+344.332818535
I0717 18:07:55.667444       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:07:55.6674266 +0000 UTC m=+344.359914270
I0717 18:07:55.704520       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:07:55.705036       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:07:55.705028027 +0000 UTC m=+344.397515667
I0717 18:07:55.709627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:07:55.722836       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:04.357025       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 18:09:04.356992017 +0000 UTC m=+413.049479697
I0717 18:09:04.357259       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:04.357367       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 18:09:04.357357744 +0000 UTC m=+413.049845394
E0717 18:09:04.368646       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0717 18:09:04.368752       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-17 18:09:04.368740141 +0000 UTC m=+413.061227821
E0717 18:09:04.368945       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0717 18:09:04.373728       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:04.373853       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:04.373885       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 18:09:04.373877882 +0000 UTC m=+413.066365552
E0717 18:09:04.382580       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0717 18:09:04.382778       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0717 18:09:04.382828       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0717 18:09:04.382885       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0717 18:09:04.408188       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qzjr4" condition "Approved" to 2026-07-17 18:09:04.408176703 +0000 UTC m=+413.100664353
I0717 18:09:04.423560       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qzjr4" condition "Ready" to 2026-07-17 18:09:04.423546476 +0000 UTC m=+413.116034106
I0717 18:09:04.440329       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:04.440314729 +0000 UTC m=+413.132802369
I0717 18:09:04.458615       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:09.383881       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:09.383861687 +0000 UTC m=+418.076349367
I0717 18:09:50.391526       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:50.391577       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 18:09:50.391571554 +0000 UTC m=+459.084059194
I0717 18:09:50.391874       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 18:09:50.391855189 +0000 UTC m=+459.084342829
I0717 18:09:50.398141       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 18:09:50.398133809 +0000 UTC m=+459.090621449
I0717 18:09:50.398551       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:50.398567       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 18:09:50.398564117 +0000 UTC m=+459.091051747
I0717 18:09:50.398798       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:50.398791       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 18:09:50.398781152 +0000 UTC m=+459.091268792
I0717 18:09:50.398814       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 18:09:50.398810743 +0000 UTC m=+459.091298383
I0717 18:09:50.525938       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.528143       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:50.528166       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 18:09:50.528161512 +0000 UTC m=+459.220649142
I0717 18:09:50.532230       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.532546       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 18:09:50.532269507 +0000 UTC m=+459.224757147
I0717 18:09:50.535326       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.537089       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:09:50.537126       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 18:09:50.537121846 +0000 UTC m=+459.229609486
I0717 18:09:50.779759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.786326       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x5tnf" condition "Approved" to 2026-07-17 18:09:50.786317741 +0000 UTC m=+459.478805391
I0717 18:09:50.801932       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x5tnf" condition "Ready" to 2026-07-17 18:09:50.801923852 +0000 UTC m=+459.494411492
I0717 18:09:50.865201       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.865223       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:50.865212483 +0000 UTC m=+459.557700123
I0717 18:09:50.891784       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k8lfv" condition "Approved" to 2026-07-17 18:09:50.891774869 +0000 UTC m=+459.584262519
I0717 18:09:50.894529       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.894855       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:50.894805781 +0000 UTC m=+459.587293431
I0717 18:09:50.902569       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.904842       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k8lfv" condition "Ready" to 2026-07-17 18:09:50.904834757 +0000 UTC m=+459.597322397
I0717 18:09:50.912790       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bfg8m" condition "Approved" to 2026-07-17 18:09:50.912780211 +0000 UTC m=+459.605267851
I0717 18:09:50.917649       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:50.917861       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:50.917856515 +0000 UTC m=+459.610344155
I0717 18:09:50.988800       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bfg8m" condition "Ready" to 2026-07-17 18:09:50.988775274 +0000 UTC m=+459.681262934
I0717 18:09:51.330890       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:51.330872942 +0000 UTC m=+460.023360612
I0717 18:09:51.579763       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:51.760908       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:51.760898106 +0000 UTC m=+460.453385756
I0717 18:09:51.882531       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:09:51.882919       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:51.882894122 +0000 UTC m=+460.575381762
I0717 18:09:52.231008       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:03.484558       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:10:03.484673       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" condition "Issuing" to 2026-07-17 18:10:03.484663639 +0000 UTC m=+472.177151539
I0717 18:10:03.485383       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" condition "Ready" to 2026-07-17 18:10:03.485374733 +0000 UTC m=+472.177862383
I0717 18:10:03.548807       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgt56-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:03.548889       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" condition "Ready" to 2026-07-17 18:10:03.548881424 +0000 UTC m=+472.241369074
I0717 18:10:04.172944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgt56-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:04.261515       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lgt56-2ktlz" condition "Approved" to 2026-07-17 18:10:04.261506104 +0000 UTC m=+472.953993744
I0717 18:10:04.300742       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lgt56-2ktlz" condition "Ready" to 2026-07-17 18:10:04.30072904 +0000 UTC m=+472.993216690
I0717 18:10:04.372845       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:04.372831435 +0000 UTC m=+473.065319105
I0717 18:10:04.399394       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgt56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgt56-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.556919       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 18:10:25.556904003 +0000 UTC m=+494.249391663
I0717 18:10:25.557354       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:10:25.557401       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 18:10:25.557396662 +0000 UTC m=+494.249884302
I0717 18:10:25.569841       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.569914       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 18:10:25.569908062 +0000 UTC m=+494.262395702
I0717 18:10:25.780161       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.810682       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-psz26" condition "Approved" to 2026-07-17 18:10:25.810670381 +0000 UTC m=+494.503158031
I0717 18:10:25.829721       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-psz26" condition "Ready" to 2026-07-17 18:10:25.829710222 +0000 UTC m=+494.522197872
I0717 18:10:25.853102       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:25.853065548 +0000 UTC m=+494.545553208
I0717 18:10:25.871971       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.872294       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:25.872285912 +0000 UTC m=+494.564773562
I0717 18:10:25.886116       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.894087       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:10:25.894518       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:25.894509716 +0000 UTC m=+494.586997386
I0717 18:10:25.904616       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:13:50.515004       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:13:50.515060       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 18:13:50.515042334 +0000 UTC m=+699.207529994
I0717 18:13:50.515075       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 18:13:50.515067026 +0000 UTC m=+699.207554676
I0717 18:13:50.530240       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:13:50.530320       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 18:13:50.530314074 +0000 UTC m=+699.222801714
I0717 18:13:50.733759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:13:50.773638       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xmj9x" condition "Approved" to 2026-07-17 18:13:50.773628555 +0000 UTC m=+699.466116195
I0717 18:13:50.796020       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xmj9x" condition "Ready" to 2026-07-17 18:13:50.796010616 +0000 UTC m=+699.488498266
I0717 18:13:50.820746       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:50.820736025 +0000 UTC m=+699.513223685
I0717 18:13:50.846321       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:13:50.846665       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:50.84665901 +0000 UTC m=+699.539146660
I0717 18:13:50.863603       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:13:50.864049       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:50.864040648 +0000 UTC m=+699.556528298
I0717 18:14:29.692877       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0717 18:14:29.692927       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 18:14:29.692922232 +0000 UTC m=+738.385409872
I0717 18:14:29.693225       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 18:14:29.693220564 +0000 UTC m=+738.385708204
I0717 18:14:29.710548       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:14:29.710631       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 18:14:29.710623812 +0000 UTC m=+738.403111462
I0717 18:14:29.834852       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:14:29.867410       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6g5mh" condition "Approved" to 2026-07-17 18:14:29.867393928 +0000 UTC m=+738.559881598
I0717 18:14:29.890118       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6g5mh" condition "Ready" to 2026-07-17 18:14:29.890108174 +0000 UTC m=+738.582595824
I0717 18:14:29.915493       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:14:29.915483025 +0000 UTC m=+738.607970665
I0717 18:14:29.938925       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0717 18:14:29.939265       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:14:29.939257936 +0000 UTC m=+738.631745586
I0717 18:14:29.959822       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"