Description of problem:

Depending on what version of ACM you have, you will either see the history of certificate policy NonCompliance grow each time the controller polls the secrets or it will refresh the timestamp of the historical event without creating a new history entry.  Both behaviors are wrong.

Version-Release number of selected component (if applicable):

I have seen the problem on 2.8 and newer.  i did not try 2.7

How reproducible:

Easy

Steps to Reproduce:

1. Create a NonCompliant certificate policy and watch the history
2. Step 1 is all you have to do
3. ...

Actual results:

Expected results:

Additional info: