I0521 01:09:20.760403       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0521 01:09:20.760698       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0521 01:09:20.760886       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0521 01:09:20.761064       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0521 01:09:20.762765       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0521 01:09:20.763440       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0521 01:09:20.763586       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0521 01:09:20.764259       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0521 01:09:20.779417       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0521 01:09:20.780450       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0521 01:09:20.780916       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0521 01:09:20.781497       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0521 01:09:20.781977       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0521 01:09:20.782405       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0521 01:09:20.782907       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0521 01:09:20.783388       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0521 01:09:20.783997       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0521 01:09:20.784043       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0521 01:09:20.784500       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0521 01:09:20.784630       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0521 01:09:20.785049       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0521 01:09:20.785388       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0521 01:09:20.785735       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0521 01:09:20.785963       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0521 01:09:20.786241       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0521 01:09:20.786327       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0521 01:09:20.788156       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0521 01:09:20.788179       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0521 01:09:20.788522       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0521 01:09:20.788670       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0521 01:09:20.788966       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0521 01:09:20.789965       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0521 01:09:20.790941       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0521 01:09:51.279981       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-21 01:09:51.279945044 +0000 UTC m=+30.555829435
I0521 01:09:51.293722       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.293754       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-21 01:09:51.29374371 +0000 UTC m=+30.569628081
I0521 01:09:51.294016       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-21 01:09:51.293973204 +0000 UTC m=+30.569857605
I0521 01:09:51.308236       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert"
I0521 01:09:51.308323       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.308442       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-21 01:09:51.308430043 +0000 UTC m=+30.584314434
E0521 01:09:51.311578       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
E0521 01:09:51.321527       1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert"
I0521 01:09:51.337587       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-21 01:09:51.337575912 +0000 UTC m=+30.613460273
I0521 01:09:51.347550       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-21 01:09:51.347540176 +0000 UTC m=+30.623424547
I0521 01:09:51.347586       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.347603       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-21 01:09:51.347600157 +0000 UTC m=+30.623484528
I0521 01:09:51.362664       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0521 01:09:51.362793       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.362813       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-21 01:09:51.362807828 +0000 UTC m=+30.638692189
I0521 01:09:51.682325       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-22g42" condition "Approved" to 2026-05-21 01:09:51.682315919 +0000 UTC m=+30.958200290
I0521 01:09:51.729671       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-22g42" condition "Ready" to 2026-05-21 01:09:51.729661699 +0000 UTC m=+31.005546060
I0521 01:09:51.772101       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:51.772091087 +0000 UTC m=+31.047975468
I0521 01:09:51.801724       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0521 01:09:51.803257       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:51.80325031 +0000 UTC m=+31.079134671
I0521 01:09:51.807916       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0521 01:09:51.820855       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0521 01:09:51.821333       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:51.821327048 +0000 UTC m=+31.097211409
I0521 01:09:51.899630       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-21 01:09:51.899616048 +0000 UTC m=+31.175500439
I0521 01:09:51.915757       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.915787       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-21 01:09:51.915779834 +0000 UTC m=+31.191664205
I0521 01:09:51.915753       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-21 01:09:51.915739402 +0000 UTC m=+31.191623773
I0521 01:09:51.931475       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0521 01:09:51.931525       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:51.934300       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-21 01:09:51.934294718 +0000 UTC m=+31.210179089
I0521 01:09:52.197918       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-21 01:09:52.197906471 +0000 UTC m=+31.473790832
I0521 01:09:52.211867       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:52.211892       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-21 01:09:52.21188626 +0000 UTC m=+31.487770621
I0521 01:09:52.212032       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-21 01:09:52.212018122 +0000 UTC m=+31.487902493
I0521 01:09:52.247274       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0521 01:09:52.247373       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-21 01:09:52.247364932 +0000 UTC m=+31.523249323
I0521 01:09:52.325045       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j9n4x" condition "Approved" to 2026-05-21 01:09:52.325032054 +0000 UTC m=+31.600916455
I0521 01:09:52.362882       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j9n4x" condition "Ready" to 2026-05-21 01:09:52.362873012 +0000 UTC m=+31.638757373
I0521 01:09:52.395717       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:52.39570603 +0000 UTC m=+31.671590401
I0521 01:09:52.428826       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0521 01:09:52.548589       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-21 01:09:52.548577543 +0000 UTC m=+31.824461904
I0521 01:09:52.569584       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-21 01:09:52.569572037 +0000 UTC m=+31.845456398
I0521 01:09:52.569897       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:52.570012       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-21 01:09:52.570005224 +0000 UTC m=+31.845889595
I0521 01:09:52.589922       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0521 01:09:52.589976       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0521 01:09:52.590013       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-21 01:09:52.590006252 +0000 UTC m=+31.865890623
I0521 01:09:52.652533       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0521 01:09:52.691517       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g24zq" condition "Approved" to 2026-05-21 01:09:52.691508473 +0000 UTC m=+31.967392834
I0521 01:09:52.716622       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g24zq" condition "Ready" to 2026-05-21 01:09:52.716613495 +0000 UTC m=+31.992497856
I0521 01:09:53.103450       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:53.10343809 +0000 UTC m=+32.379322451
I0521 01:09:53.240492       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0521 01:09:53.241057       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:53.241048301 +0000 UTC m=+32.516932702
I0521 01:09:53.630532       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-tswjc" condition "Approved" to 2026-05-21 01:09:53.630521273 +0000 UTC m=+32.906405634
I0521 01:09:53.645882       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0521 01:09:53.694725       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0521 01:09:53.908783       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-tswjc" condition "Ready" to 2026-05-21 01:09:53.908773134 +0000 UTC m=+33.184657505
I0521 01:09:54.292952       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 01:09:54.292939603 +0000 UTC m=+33.568823974
I0521 01:09:54.441738       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0521 01:09:54.742608       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
E0521 01:11:15.174223       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0521 01:11:15.209127       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-21 01:11:15.209111472 +0000 UTC m=+114.484995843
I0521 01:11:15.233411       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-21 01:11:15.233402025 +0000 UTC m=+114.509286396
E0521 01:11:17.161583       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0521 01:11:17.211325       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-21 01:11:17.211309337 +0000 UTC m=+116.487193738
I0521 01:11:17.229896       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-21 01:11:17.22988719 +0000 UTC m=+116.505771561
E0521 01:11:18.698966       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0521 01:11:18.744811       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-21 01:11:18.744796164 +0000 UTC m=+118.020680555
I0521 01:11:18.768907       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-21 01:11:18.768895024 +0000 UTC m=+118.044779395
E0521 01:11:20.324792       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0521 01:11:20.354522       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-21 01:11:20.354503821 +0000 UTC m=+119.630388192
I0521 01:11:20.376648       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-21 01:11:20.376637475 +0000 UTC m=+119.652521836