Ah yes I did that first - deployed the operator with v1.13.0 to match the running non-operator-managed SpiceDB cluster. It worked perfectly.