Stop acme-challenge from retrying

➜ kubectl get CertificateRequest --all-namespaces
NAMESPACE      NAME                      READY   AGE
istio-system   ingress-cert-3740439329   True    17d

➜ kubectl get Order --all-namespaces
NAMESPACE      NAME                                STATE   AGE
istio-system   ingress-cert-3740439329-276182855   valid   17d

➜ kubectl get Challenge --all-namespaces
No resources found

Does this help?