I0608 09:25:10.050684 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0608 09:25:10.050862 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0608 09:25:10.050923 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0608 09:25:10.051014 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0608 09:25:10.052352 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0608 09:25:10.052801 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0608 09:25:10.052992 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0608 09:25:10.053703 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0608 09:25:10.070005 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0608 09:25:10.071368 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0608 09:25:10.071723 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0608 09:25:10.073853 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0608 09:25:10.073886 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0608 09:25:10.073815 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0608 09:25:10.075118 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0608 09:25:10.076199 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0608 09:25:10.077152 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0608 09:25:10.077156 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0608 09:25:10.077643 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0608 09:25:10.078550 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0608 09:25:10.078645 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0608 09:25:10.079057 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0608 09:25:10.079639 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0608 09:25:10.080457 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0608 09:25:10.080741 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0608 09:25:10.080756 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0608 09:25:10.081093 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0608 09:25:10.081835 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0608 09:25:10.082214 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0608 09:25:10.082655 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0608 09:25:10.083253 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0608 09:25:10.083270 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0608 09:25:10.083893 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0608 09:26:12.687288 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-08 09:26:12.687237794 +0000 UTC m=+62.669066054 I0608 09:26:12.700822 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:12.700870 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-08 09:26:12.700865506 +0000 UTC m=+62.682693736 I0608 09:26:12.702524 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-08 09:26:12.702513883 +0000 UTC m=+62.684342113 E0608 09:26:12.717554 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18b710e98053d7f0", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"a7ea02f5-fbf6-4349-86a0-6bfbb4939a90", APIVersion:"cert-manager.io/v1", ResourceVersion:"1447", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.June, 8, 9, 26, 12, 714723312, time.Local), LastTimestamp:time.Date(2026, time.June, 8, 9, 26, 12, 714723312, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18b710e98053d7f0" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0608 09:26:12.719866 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0608 09:26:12.720084 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-08 09:26:12.720076809 +0000 UTC m=+62.701905039 E0608 09:26:12.722285 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0608 09:26:12.757328 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-08 09:26:12.757302476 +0000 UTC m=+62.739130696 I0608 09:26:12.772826 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-08 09:26:12.772814329 +0000 UTC m=+62.754642589 I0608 09:26:12.773185 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:12.773257 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-08 09:26:12.773251286 +0000 UTC m=+62.755079526 I0608 09:26:12.786349 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0608 09:26:12.786399 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:12.786411 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-08 09:26:12.786407771 +0000 UTC m=+62.768235991 E0608 09:26:13.004533 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0608 09:26:13.282373 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-08 09:26:13.28236243 +0000 UTC m=+63.264190670 I0608 09:26:13.282987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6ws74" condition "Approved" to 2026-06-08 09:26:13.28298171 +0000 UTC m=+63.264809950 I0608 09:26:13.299311 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-08 09:26:13.299301414 +0000 UTC m=+63.281129654 I0608 09:26:13.299634 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:13.299655 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-08 09:26:13.29965142 +0000 UTC m=+63.281479650 I0608 09:26:13.312667 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0608 09:26:13.312735 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:13.312747 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-08 09:26:13.312742801 +0000 UTC m=+63.294571041 I0608 09:26:13.314142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6ws74" condition "Ready" to 2026-06-08 09:26:13.314138664 +0000 UTC m=+63.295966884 I0608 09:26:13.345949 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:13.345911398 +0000 UTC m=+63.327739628 I0608 09:26:13.373263 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0608 09:26:13.578936 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-08 09:26:13.578925909 +0000 UTC m=+63.560754129 I0608 09:26:13.596366 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:13.596393 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-08 09:26:13.596387262 +0000 UTC m=+63.578215482 I0608 09:26:13.596712 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-08 09:26:13.596707297 +0000 UTC m=+63.578535517 I0608 09:26:13.627506 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0608 09:26:13.628129 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-08 09:26:13.628116545 +0000 UTC m=+63.609944875 I0608 09:26:13.748044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-wc22m" condition "Approved" to 2026-06-08 09:26:13.748034676 +0000 UTC m=+63.729862906 I0608 09:26:13.780399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-wc22m" condition "Ready" to 2026-06-08 09:26:13.780388049 +0000 UTC m=+63.762216269 I0608 09:26:13.839651 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:13.839643589 +0000 UTC m=+63.821471799 I0608 09:26:13.903768 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0608 09:26:13.905460 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:13.905450253 +0000 UTC m=+63.887278513 I0608 09:26:13.924268 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-08 09:26:13.924255218 +0000 UTC m=+63.906083448 I0608 09:26:13.926819 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0608 09:26:13.927035 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:13.927030553 +0000 UTC m=+63.908858773 I0608 09:26:13.938958 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-08 09:26:13.938948995 +0000 UTC m=+63.920777215 I0608 09:26:13.939190 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:13.939200 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-08 09:26:13.939198389 +0000 UTC m=+63.921026609 I0608 09:26:13.968910 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0608 09:26:13.970549 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0608 09:26:13.970568 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-08 09:26:13.970563817 +0000 UTC m=+63.952392037 I0608 09:26:14.028287 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0608 09:26:14.068678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vwlcg" condition "Approved" to 2026-06-08 09:26:14.068670707 +0000 UTC m=+64.050498917 I0608 09:26:14.098570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vwlcg" condition "Ready" to 2026-06-08 09:26:14.098560218 +0000 UTC m=+64.080388428 I0608 09:26:14.552888 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:14.552759148 +0000 UTC m=+64.534587368 I0608 09:26:14.747765 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0608 09:26:14.748002 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:14.747997576 +0000 UTC m=+64.729825796 I0608 09:26:14.798526 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0608 09:26:14.859860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sj5zz" condition "Approved" to 2026-06-08 09:26:14.859843883 +0000 UTC m=+64.841672133 I0608 09:26:15.116240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sj5zz" condition "Ready" to 2026-06-08 09:26:15.116227101 +0000 UTC m=+65.098055341 I0608 09:26:15.400877 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0608 09:26:15.653030 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:15.65301748 +0000 UTC m=+65.634845700 I0608 09:26:15.799866 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0608 09:26:15.800271 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 09:26:15.80026241 +0000 UTC m=+65.782090650 I0608 09:26:16.002207 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0608 09:27:27.684927 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0608 09:27:27.726886 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-08 09:27:27.72686678 +0000 UTC m=+137.708695040 I0608 09:27:27.748170 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-08 09:27:27.748153251 +0000 UTC m=+137.729981481 E0608 09:27:29.851585 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0608 09:27:29.892561 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-08 09:27:29.892506209 +0000 UTC m=+139.874334449 I0608 09:27:29.914084 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-08 09:27:29.914071631 +0000 UTC m=+139.895899871 E0608 09:27:31.441824 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0608 09:27:31.471596 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-08 09:27:31.471582363 +0000 UTC m=+141.453410593 I0608 09:27:31.497370 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-08 09:27:31.497325251 +0000 UTC m=+141.479153481 E0608 09:27:33.199377 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0608 09:27:33.236205 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-08 09:27:33.236187375 +0000 UTC m=+143.218015625 I0608 09:27:33.262169 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-08 09:27:33.262116653 +0000 UTC m=+143.243944893