long terminataing time for cert-manager namespace

[az-z]

hello,
on a new single node cluster with the firewall up, i ran kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.10.1/cert-manager.yaml. That operation resulted in a bunch of pods failing due to connection issues. I Stopped the firewall, but the pods continue to fail. I issued :

kubectl delete -f https://github.com/cert-manager/cert-manager/releases/download/v1.10.1/cert-manager.yaml

that seemed to clean up resources , but it was stuck sitting at :

....
service "cert-manager" deleted
service "cert-manager-webhook" deleted
deployment.apps "cert-manager-cainjector" deleted
deployment.apps "cert-manager" deleted
deployment.apps "cert-manager-webhook" deleted
mutatingwebhookconfiguration.admissionregistration.k8s.io "cert-manager-webhook" deleted
validatingwebhookconfiguration.admissionregistration.k8s.io "cert-manager-webhook" deleted

<hanging here>

CTRL-C with "delete" operation seemed to complete correctly. But the sequential execution of "apply" leads to a partially successful outcome:

.....
role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
role.rbac.authorization.k8s.io/cert-manager:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection created
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
Error from server (Forbidden): error when creating "https://github.com/cert-manager/cert-manager/releases/download/v1.10.1/cert-manager.yaml": serviceaccounts "cert-manager-cainjector" is forbidden: unable to create new content in namespace cert-manager because it is being terminated
Error from server (Forbidden): error when creating "https://github.com/cert-manager/cert-manager/releases/download/v1.10.1/cert-manager.yaml": serviceaccounts "cert-manager" is forbidden: unable to create new content in namespace cert-manager because it is being terminated
Error from server (Forbidden): error when creating "https://github.com/cert-manager/cert-manager/releases/download/v1.10.1/cert-manager.yaml": serviceaccounts "cert-manager-webhook" is forbidden: unable to create new content in namespace cert-manager because it is being terminated

< a ton of "being terminated messages to follow >

I can see that the "cert-manager+" namespace is hanging with the status "terminating" for the past 20 minutes now.
It doesn't look like there are any obvious resources associated with it.

Please advise.

P.S. the firewall is down atm.

kubectl get all -n cert-manager
No resources found in cert-manager namespace.
[az@dell5000 playground]$ kubectl get namespace cert-manager -o json | jq '.spec.finalizers'
[
  "kubernetes"
]
[az@dell5000 playground]$ kubectl get events -n cert-manager
No resources found in cert-manager namespace.

[az-z]

this should not belong here - the issue is with the cert-manager.