I0610 14:51:19.588557       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0610 14:51:19.588751       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0610 14:51:19.588825       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0610 14:51:19.588934       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0610 14:51:19.591925       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0610 14:51:19.593175       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0610 14:51:19.593789       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0610 14:51:19.594250       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0610 14:51:19.607169       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0610 14:51:19.608618       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0610 14:51:19.608911       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0610 14:51:19.609416       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0610 14:51:19.609702       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0610 14:51:19.610003       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0610 14:51:19.610447       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0610 14:51:19.610520       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0610 14:51:19.610937       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0610 14:51:19.611697       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0610 14:51:19.612467       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0610 14:51:19.613585       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0610 14:51:19.614207       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0610 14:51:19.614480       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0610 14:51:19.614512       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0610 14:51:19.614676       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0610 14:51:19.614974       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0610 14:51:19.615032       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0610 14:51:19.615716       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0610 14:51:19.615768       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0610 14:51:19.619059       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0610 14:51:19.619456       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0610 14:51:19.620331       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0610 14:51:19.620621       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0610 14:51:19.620944       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0610 14:51:47.606275       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-10 14:51:47.606236959 +0000 UTC m=+28.051846868
I0610 14:51:47.627165       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0610 14:51:47.627366       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-10 14:51:47.627336745 +0000 UTC m=+28.072946634
I0610 14:51:47.627147       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-10 14:51:47.627102111 +0000 UTC m=+28.072712030
I0610 14:51:47.650493       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert"
I0610 14:51:47.650547       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-10 14:51:47.650542747 +0000 UTC m=+28.096152626
E0610 14:51:47.656743       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
I0610 14:51:47.707321       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-10 14:51:47.707308244 +0000 UTC m=+28.152918133
I0610 14:51:47.728960       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-10 14:51:47.728949659 +0000 UTC m=+28.174559538
I0610 14:51:47.729375       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0610 14:51:47.729423       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-10 14:51:47.729415287 +0000 UTC m=+28.175025176
I0610 14:51:47.748192       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0610 14:51:47.748291       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-10 14:51:47.748256185 +0000 UTC m=+28.193866074
E0610 14:51:47.815024       1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert"
I0610 14:51:47.863805       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0610 14:51:47.937847       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-plhsp" condition "Approved" to 2026-06-10 14:51:47.937836291 +0000 UTC m=+28.383446170
I0610 14:51:47.996284       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-plhsp" condition "Ready" to 2026-06-10 14:51:47.996273027 +0000 UTC m=+28.441882906
I0610 14:51:48.037757       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:48.037746472 +0000 UTC m=+28.483356371
I0610 14:51:48.060942       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0610 14:51:48.061304       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:48.061297126 +0000 UTC m=+28.506907005
I0610 14:51:48.100334       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0610 14:51:48.480842       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-10 14:51:48.480828808 +0000 UTC m=+28.926438697
I0610 14:51:48.506666       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0610 14:51:48.506689       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-10 14:51:48.50668277 +0000 UTC m=+28.952292659
I0610 14:51:48.506772       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-10 14:51:48.506753851 +0000 UTC m=+28.952363720
I0610 14:51:48.522554       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0610 14:51:48.522740       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-10 14:51:48.522703419 +0000 UTC m=+28.968313298
I0610 14:51:48.883639       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-10 14:51:48.88363025 +0000 UTC m=+29.329240129
I0610 14:51:48.897446       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-10 14:51:48.89743521 +0000 UTC m=+29.343045119
I0610 14:51:48.897528       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0610 14:51:48.897553       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-10 14:51:48.897545912 +0000 UTC m=+29.343155821
I0610 14:51:48.923430       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0610 14:51:48.923499       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-10 14:51:48.923494286 +0000 UTC m=+29.369104165
I0610 14:51:49.023857       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0610 14:51:49.056512       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0610 14:51:49.062659       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pkgsc" condition "Approved" to 2026-06-10 14:51:49.062651497 +0000 UTC m=+29.508261396
I0610 14:51:49.108882       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rblrt" condition "Approved" to 2026-06-10 14:51:49.108873105 +0000 UTC m=+29.554482994
I0610 14:51:49.137700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rblrt" condition "Ready" to 2026-06-10 14:51:49.137691045 +0000 UTC m=+29.583300924
I0610 14:51:49.151683       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pkgsc" condition "Ready" to 2026-06-10 14:51:49.151663587 +0000 UTC m=+29.597273506
I0610 14:51:49.217900       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:49.217889946 +0000 UTC m=+29.663499835
I0610 14:51:49.218945       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:49.218933294 +0000 UTC m=+29.664543173
I0610 14:51:49.255042       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0610 14:51:49.257491       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:49.257484165 +0000 UTC m=+29.703094054
I0610 14:51:49.259941       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0610 14:51:49.299886       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-10 14:51:49.299874879 +0000 UTC m=+29.745484768
I0610 14:51:49.320217       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0610 14:51:49.320339       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0610 14:51:49.320359       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-10 14:51:49.320354408 +0000 UTC m=+29.765964297
I0610 14:51:49.320672       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:49.320666724 +0000 UTC m=+29.766276613
I0610 14:51:49.320360       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-10 14:51:49.320355048 +0000 UTC m=+29.765964937
I0610 14:51:49.577556       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0610 14:51:49.577628       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-10 14:51:49.577622642 +0000 UTC m=+30.023232531
I0610 14:51:50.065963       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0610 14:51:50.174843       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0610 14:51:50.268846       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-ng8ls" condition "Approved" to 2026-06-10 14:51:50.268833502 +0000 UTC m=+30.714443391
I0610 14:51:50.382397       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-ng8ls" condition "Ready" to 2026-06-10 14:51:50.382388124 +0000 UTC m=+30.827998003
I0610 14:51:50.823157       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:50.823146732 +0000 UTC m=+31.268756611
I0610 14:51:50.982243       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0610 14:51:50.982581       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 14:51:50.98256427 +0000 UTC m=+31.428174149
I0610 14:51:51.312642       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0610 14:51:51.336528       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
E0610 14:53:00.788087       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0610 14:53:00.822556       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-10 14:53:00.822543755 +0000 UTC m=+101.268153634
I0610 14:53:00.845817       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-10 14:53:00.845805517 +0000 UTC m=+101.291415396
E0610 14:53:03.921383       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0610 14:53:03.962783       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-10 14:53:03.962772458 +0000 UTC m=+104.408382347
I0610 14:53:03.981023       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-10 14:53:03.981010332 +0000 UTC m=+104.426620251
E0610 14:53:05.618934       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0610 14:53:05.648205       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-10 14:53:05.648196427 +0000 UTC m=+106.093806316
I0610 14:53:05.663634       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-10 14:53:05.663627778 +0000 UTC m=+106.109237667
E0610 14:53:07.300746       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0610 14:53:07.346364       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-10 14:53:07.346349014 +0000 UTC m=+107.791958923
I0610 14:53:07.367466       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-10 14:53:07.367448847 +0000 UTC m=+107.813058766