Pending cert-manager challenges with new pipelines
I'm investigating a patch upgrade to cert-manager that makes the pipeline fail, actually because the cluster doesn't get certificates (or at least thinks it doesn't). Reverting in the upgrade branch to the previous (i.e., current main) version actually still has this problem so it's more serious than a broken upstream upgrade. It might be some sort of a timing issue, with some cert-manager component attempting to obtain a certificate before all components of cert-manager are ready to process that request, which can easily happen because in the pipeline we install cert-manager and apps that rely on it in rapid succession.
I've opened an upstream issue: https://github.com/cert-manager/cert-manager/issues/5602