When the operator updates a certificate it doesn't do a get first or use controllerutil.CreateOrUpdate. This may have been allowed in older versions of cert-manager but it fails with cert-manager 1.20.0.
This breaks the reconciliation in the middle and causes clusters using an external proxy to fail to come up.
When the operator updates a certificate it doesn't do a get first or use
controllerutil.CreateOrUpdate. This may have been allowed in older versions of cert-manager but it fails with cert-manager 1.20.0.This breaks the reconciliation in the middle and causes clusters using an external proxy to fail to come up.