I0527 00:35:38.270533 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0527 00:35:38.270675 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0527 00:35:38.270747 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0527 00:35:38.274214 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0527 00:35:38.274665 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0527 00:35:38.274860 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0527 00:35:38.274880 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0527 00:35:38.281960 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0527 00:35:38.298693 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0527 00:35:38.299050 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0527 00:35:38.304450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0527 00:35:38.307650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0527 00:35:38.310045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0527 00:35:38.312148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0527 00:35:38.318133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0527 00:35:38.322194 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0527 00:35:38.325336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0527 00:35:38.327662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0527 00:35:38.329758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0527 00:35:38.329791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0527 00:35:38.332073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0527 00:35:38.333992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0527 00:35:38.336448 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0527 00:35:38.336796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0527 00:35:38.343323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0527 00:35:38.346030 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0527 00:35:38.346055 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0527 00:35:38.346065 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0527 00:35:38.346153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0527 00:35:38.348828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0527 00:35:38.350962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0527 00:35:38.353155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0527 00:35:38.355330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0527 00:35:38.358279 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.358291 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.359350 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.375089 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.388837 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.403377 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.417068 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.433107 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.449669 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:38.463062 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 00:35:55.374488 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-27 00:35:55.374463519 +0000 UTC m=+17.134719481 I0527 00:35:56.144239 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 00:35:56.144223282 +0000 UTC m=+17.904479274 I0527 00:35:56.144838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:35:56.144909 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 00:35:56.144899137 +0000 UTC m=+17.905155109 E0527 00:35:56.160549 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 00:35:56.160608 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-27 00:35:56.160601422 +0000 UTC m=+17.920857384 E0527 00:35:56.160630 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 00:35:56.162796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:35:56.162891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:35:56.162914 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 00:35:56.162907104 +0000 UTC m=+17.923163066 E0527 00:35:56.170218 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0527 00:35:56.170802 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 00:35:56.170878 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 00:35:56.170931 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0527 00:35:56.201353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:35:56.205717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-279pc" condition "Approved" to 2026-05-27 00:35:56.205704343 +0000 UTC m=+17.965960305 I0527 00:35:56.219837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-279pc" condition "Ready" to 2026-05-27 00:35:56.219825604 +0000 UTC m=+17.980081566 I0527 00:35:56.244131 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:35:56.244115744 +0000 UTC m=+18.004371706 I0527 00:35:56.265423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:35:56.265643 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:35:56.265636702 +0000 UTC m=+18.025892664 I0527 00:35:56.268127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:35:56.277535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:35:56.277910 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:35:56.27790041 +0000 UTC m=+18.038156402 I0527 00:35:56.279046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:36:01.171119 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:36:01.171102361 +0000 UTC m=+22.931358343 I0527 00:36:23.235554 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 00:36:23.234992134 +0000 UTC m=+44.995248126 I0527 00:36:23.236115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:36:23.236170 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 00:36:23.236158942 +0000 UTC m=+44.996414934 I0527 00:36:23.257649 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-27 00:36:23.257639151 +0000 UTC m=+45.017895103 I0527 00:36:23.274295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:36:23.274514 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 00:36:23.274504728 +0000 UTC m=+45.034760690 I0527 00:36:23.888517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:36:23.915483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9bmxs" condition "Approved" to 2026-05-27 00:36:23.915473816 +0000 UTC m=+45.675729778 I0527 00:36:23.950121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9bmxs" condition "Ready" to 2026-05-27 00:36:23.950108031 +0000 UTC m=+45.710363983 I0527 00:36:23.981661 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:36:23.981649318 +0000 UTC m=+45.741905280 I0527 00:36:24.002749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:36:24.003864 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:36:24.003855775 +0000 UTC m=+45.764111737 I0527 00:36:24.012062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:36:24.023397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:40:35.207105 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-05-27 00:40:35.206580904 +0000 UTC m=+296.966836866 I0527 00:40:35.208775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:40:35.208812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-05-27 00:40:35.208807138 +0000 UTC m=+296.969063100 I0527 00:40:35.226905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:40:35.227088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:40:35.227105 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-05-27 00:40:35.227099461 +0000 UTC m=+296.987355413 I0527 00:40:35.551292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:40:35.567785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-bvbnn" condition "Approved" to 2026-05-27 00:40:35.567777408 +0000 UTC m=+297.328033360 I0527 00:40:35.599270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-bvbnn" condition "Ready" to 2026-05-27 00:40:35.599257699 +0000 UTC m=+297.359513661 I0527 00:40:35.631136 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:40:35.631122557 +0000 UTC m=+297.391378529 I0527 00:40:35.660605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:40:35.660995 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:40:35.660988649 +0000 UTC m=+297.421244611 I0527 00:40:35.694670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:40:35.695033 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:40:35.695024819 +0000 UTC m=+297.455280781 I0527 00:41:40.661008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:41:40.661060 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 00:41:40.661035947 +0000 UTC m=+362.421291909 I0527 00:41:40.661703 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 00:41:40.661695579 +0000 UTC m=+362.421951541 E0527 00:41:40.677197 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 00:41:40.677251 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-27 00:41:40.677241047 +0000 UTC m=+362.437497019 E0527 00:41:40.677312 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 00:41:40.679151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:41:40.679301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 00:41:40.679290367 +0000 UTC m=+362.439546339 E0527 00:41:40.690552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0527 00:41:40.692305 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 00:41:40.692363 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 00:41:40.692402 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0527 00:41:40.694829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:41:40.711709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scjps" condition "Approved" to 2026-05-27 00:41:40.71169363 +0000 UTC m=+362.471949582 I0527 00:41:40.724174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scjps" condition "Ready" to 2026-05-27 00:41:40.724161588 +0000 UTC m=+362.484417540 I0527 00:41:40.745832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:41:40.745819886 +0000 UTC m=+362.506075838 I0527 00:41:40.764057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:41:40.764433 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:41:40.764424944 +0000 UTC m=+362.524680906 I0527 00:41:40.780227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:41:40.787953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:41:45.692837 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:41:45.69281535 +0000 UTC m=+367.453071332 I0527 00:42:26.077586 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 00:42:26.077564723 +0000 UTC m=+407.837820665 I0527 00:42:26.077884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.077921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 00:42:26.077917011 +0000 UTC m=+407.838172973 I0527 00:42:26.078240 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 00:42:26.078236458 +0000 UTC m=+407.838492420 I0527 00:42:26.078456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.078490 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 00:42:26.078486861 +0000 UTC m=+407.838742823 I0527 00:42:26.086252 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 00:42:26.086244682 +0000 UTC m=+407.846500634 I0527 00:42:26.086349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.086386 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 00:42:26.08637917 +0000 UTC m=+407.846635112 I0527 00:42:26.094539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.094603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.094627 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 00:42:26.094622036 +0000 UTC m=+407.854877988 I0527 00:42:26.102215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.102268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.102285 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 00:42:26.102279583 +0000 UTC m=+407.862535545 I0527 00:42:26.110447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.110541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:26.110593 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 00:42:26.110587044 +0000 UTC m=+407.870843006 I0527 00:42:26.260533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.271512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6szbw" condition "Approved" to 2026-05-27 00:42:26.27150359 +0000 UTC m=+408.031759542 I0527 00:42:26.289896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6szbw" condition "Ready" to 2026-05-27 00:42:26.289882652 +0000 UTC m=+408.050138634 I0527 00:42:26.330515 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:26.330502677 +0000 UTC m=+408.090758669 I0527 00:42:26.353951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.405183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6vv2z" condition "Approved" to 2026-05-27 00:42:26.405170704 +0000 UTC m=+408.165426656 I0527 00:42:26.421932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.425022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6vv2z" condition "Ready" to 2026-05-27 00:42:26.425010262 +0000 UTC m=+408.185266214 I0527 00:42:26.454642 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:26.454626086 +0000 UTC m=+408.214882068 I0527 00:42:26.502779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:26.503078 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:26.503070156 +0000 UTC m=+408.263326118 E0527 00:42:26.812571 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-vwgff\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0527 00:42:26.866172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kl79w" condition "Approved" to 2026-05-27 00:42:26.866157805 +0000 UTC m=+408.626413757 I0527 00:42:27.015676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kl79w" condition "Ready" to 2026-05-27 00:42:27.015662131 +0000 UTC m=+408.775918083 I0527 00:42:27.508112 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:27.508101418 +0000 UTC m=+409.268357380 I0527 00:42:27.602509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:34.353006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:34.353048 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" condition "Issuing" to 2026-05-27 00:42:34.353029883 +0000 UTC m=+416.113285835 I0527 00:42:34.355714 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" condition "Ready" to 2026-05-27 00:42:34.355699063 +0000 UTC m=+416.115955025 I0527 00:42:34.371991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kgplh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:34.372070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" condition "Ready" to 2026-05-27 00:42:34.372062407 +0000 UTC m=+416.132318369 I0527 00:42:34.528106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kgplh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:34.562644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kgplh-j8zpf" condition "Approved" to 2026-05-27 00:42:34.562632669 +0000 UTC m=+416.322888611 I0527 00:42:34.579696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kgplh-j8zpf" condition "Ready" to 2026-05-27 00:42:34.579683979 +0000 UTC m=+416.339939941 I0527 00:42:34.607672 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:34.60765982 +0000 UTC m=+416.367915782 I0527 00:42:34.624946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kgplh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:34.666675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kgplh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kgplh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:46.777463 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 00:42:46.777407031 +0000 UTC m=+428.537663003 I0527 00:42:46.777627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:42:46.777661 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 00:42:46.777653173 +0000 UTC m=+428.537909165 I0527 00:42:46.790346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:46.790422 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 00:42:46.790415388 +0000 UTC m=+428.550671350 I0527 00:42:47.195040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:47.230216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qz2tn" condition "Approved" to 2026-05-27 00:42:47.230203759 +0000 UTC m=+428.990459711 I0527 00:42:47.263004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qz2tn" condition "Ready" to 2026-05-27 00:42:47.262981941 +0000 UTC m=+429.023237923 I0527 00:42:47.301609 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:42:47.30158366 +0000 UTC m=+429.061839622 I0527 00:42:47.323562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:42:47.371145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:45:59.733781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:45:59.733833 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 00:45:59.73382694 +0000 UTC m=+621.494082882 I0527 00:45:59.733973 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 00:45:59.733952809 +0000 UTC m=+621.494208801 I0527 00:45:59.751002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:45:59.751095 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 00:45:59.751085097 +0000 UTC m=+621.511341089 I0527 00:45:59.860407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:45:59.896273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qd6dv" condition "Approved" to 2026-05-27 00:45:59.896263851 +0000 UTC m=+621.656519803 I0527 00:45:59.919610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qd6dv" condition "Ready" to 2026-05-27 00:45:59.919598956 +0000 UTC m=+621.679854918 I0527 00:45:59.942564 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:45:59.942551673 +0000 UTC m=+621.702807625 I0527 00:45:59.962985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:45:59.963448 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:45:59.963441142 +0000 UTC m=+621.723697104 I0527 00:45:59.982485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:45:59.982858 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:45:59.982851746 +0000 UTC m=+621.743107698 I0527 00:46:42.207975 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 00:46:42.207956631 +0000 UTC m=+663.968212633 I0527 00:46:42.208631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:46:42.208793 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 00:46:42.208735016 +0000 UTC m=+663.968991008 I0527 00:46:42.225100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:46:42.225193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 00:46:42.225226 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 00:46:42.22521976 +0000 UTC m=+663.985475722 I0527 00:46:42.398755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h489x" condition "Approved" to 2026-05-27 00:46:42.398740224 +0000 UTC m=+664.158996186 I0527 00:46:42.420989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h489x" condition "Ready" to 2026-05-27 00:46:42.420977294 +0000 UTC m=+664.181233246 I0527 00:46:42.445970 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:46:42.445958092 +0000 UTC m=+664.206214054 I0527 00:46:42.479707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 00:46:42.480076 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 00:46:42.480069097 +0000 UTC m=+664.240325049 I0527 00:46:42.482508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"