If you change a password to the one which doesn't satisfy complexity for validate password component your cluster will be in a flapping state between ready and error which is confusing.
At some point we were discussing adding different statuses so maybe this is a good candidate.
Basically the cluster is operational, but it is not reflecting the desired end state (password in this case).

repeating error in the operator log:

STR: