I0822 08:32:01.433512 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0822 08:32:01.433706 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0822 08:32:01.433811 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0822 08:32:01.433986 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 08:32:01.435709 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0822 08:32:01.436297 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0822 08:32:01.436570 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0822 08:32:01.436867 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 08:32:01.452466 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0822 08:32:01.452712 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0822 08:32:01.452746 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0822 08:32:01.453655 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0822 08:32:01.455052 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0822 08:32:01.455291 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0822 08:32:01.455870 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0822 08:32:01.456533 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0822 08:32:01.457198 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0822 08:32:01.457847 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0822 08:32:01.458411 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0822 08:32:01.458762 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0822 08:32:01.458855 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0822 08:32:01.459313 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0822 08:32:01.460215 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0822 08:32:01.460402 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0822 08:32:01.460749 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0822 08:32:01.460904 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0822 08:32:01.461269 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0822 08:32:01.461746 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0822 08:32:01.461991 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0822 08:32:01.462089 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0822 08:32:01.462399 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0822 08:32:01.464899 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0822 08:32:01.465270 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0822 08:32:28.031007 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-22 08:32:28.030917656 +0000 UTC m=+26.635654188 I0822 08:32:28.047127 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 08:32:28.047117777 +0000 UTC m=+26.651854289 I0822 08:32:28.047211 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:28.047233 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 08:32:28.047227086 +0000 UTC m=+26.651963608 I0822 08:32:28.065047 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0822 08:32:28.065113 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 08:32:28.065107942 +0000 UTC m=+26.669844464 E0822 08:32:28.077573 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0822 08:32:28.127232 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 08:32:28.12722201 +0000 UTC m=+26.731958532 I0822 08:32:28.147171 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 08:32:28.147161644 +0000 UTC m=+26.751898176 I0822 08:32:28.147559 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:28.147577 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 08:32:28.1475738 +0000 UTC m=+26.752310322 I0822 08:32:28.163561 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 08:32:28.163625 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 08:32:28.163617975 +0000 UTC m=+26.768354497 E0822 08:32:28.209441 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0822 08:32:28.356228 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 08:32:28.395844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rk2gw" condition "Approved" to 2026-08-22 08:32:28.395836536 +0000 UTC m=+27.000573048 I0822 08:32:28.437611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rk2gw" condition "Ready" to 2026-08-22 08:32:28.437596995 +0000 UTC m=+27.042333547 I0822 08:32:28.483089 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:28.483079415 +0000 UTC m=+27.087815937 I0822 08:32:28.528813 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 08:32:28.529036 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:28.52903177 +0000 UTC m=+27.133768282 I0822 08:32:28.549167 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 08:32:28.549351 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:28.549346791 +0000 UTC m=+27.154083293 I0822 08:32:28.557116 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 08:32:28.876853 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 08:32:28.876840458 +0000 UTC m=+27.481576970 I0822 08:32:28.892404 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:32:28.892391707 +0000 UTC m=+27.497128239 I0822 08:32:28.892683 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:28.893980 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-22 08:32:28.893963031 +0000 UTC m=+27.498699623 I0822 08:32:28.909462 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 08:32:28.909549 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:32:28.90953965 +0000 UTC m=+27.514276202 I0822 08:32:29.176005 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 08:32:29.220664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-wvm9t" condition "Approved" to 2026-08-22 08:32:29.220655838 +0000 UTC m=+27.825392350 I0822 08:32:29.256830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-wvm9t" condition "Ready" to 2026-08-22 08:32:29.256821493 +0000 UTC m=+27.861558005 I0822 08:32:29.301250 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:29.301237824 +0000 UTC m=+27.905974336 I0822 08:32:29.324298 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 08:32:29.324278756 +0000 UTC m=+27.929015278 I0822 08:32:29.327687 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 08:32:29.327974 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:29.327967699 +0000 UTC m=+27.932704221 I0822 08:32:29.337166 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 08:32:29.337159543 +0000 UTC m=+27.941896065 I0822 08:32:29.337427 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:29.337445 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-22 08:32:29.33744227 +0000 UTC m=+27.942178792 I0822 08:32:29.360021 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 08:32:29.360074 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 08:32:29.362207 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:29.362228 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-22 08:32:29.362223195 +0000 UTC m=+27.966959717 I0822 08:32:29.668620 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 08:32:29.682977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-m5r72" condition "Approved" to 2026-08-22 08:32:29.682963352 +0000 UTC m=+28.287699884 I0822 08:32:29.710969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-m5r72" condition "Ready" to 2026-08-22 08:32:29.710957893 +0000 UTC m=+28.315694415 I0822 08:32:29.749709 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:29.749698902 +0000 UTC m=+28.354435414 I0822 08:32:29.761238 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 08:32:29.761225343 +0000 UTC m=+28.365961865 I0822 08:32:29.792197 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 08:32:29.792187843 +0000 UTC m=+28.396924345 I0822 08:32:29.792326 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:29.792343 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 08:32:29.792341592 +0000 UTC m=+28.397078104 I0822 08:32:29.848298 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 08:32:29.992003 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 08:32:29.992169 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 08:32:29.992203 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 08:32:29.992198338 +0000 UTC m=+28.596934850 I0822 08:32:30.544479 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 08:32:30.600363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4xtxt" condition "Approved" to 2026-08-22 08:32:30.600354408 +0000 UTC m=+29.205090910 I0822 08:32:30.711874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4xtxt" condition "Ready" to 2026-08-22 08:32:30.711862326 +0000 UTC m=+29.316598848 I0822 08:32:31.249045 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:31.249036508 +0000 UTC m=+29.853773020 I0822 08:32:31.291077 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 08:32:31.291419 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:32:31.291410482 +0000 UTC m=+29.896147034 I0822 08:32:31.553103 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 08:32:31.601180 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0822 08:33:31.860305 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0822 08:33:31.889332 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 08:33:31.889287154 +0000 UTC m=+90.494023716 I0822 08:33:31.910265 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 08:33:31.910255468 +0000 UTC m=+90.514991980 E0822 08:33:34.246997 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0822 08:33:34.294904 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 08:33:34.294893123 +0000 UTC m=+92.899629635 I0822 08:33:34.320798 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:33:34.320780846 +0000 UTC m=+92.925517348 E0822 08:33:36.028303 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0822 08:33:36.077894 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 08:33:36.077881789 +0000 UTC m=+94.682618311 I0822 08:33:36.096472 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 08:33:36.096463738 +0000 UTC m=+94.701200250 E0822 08:33:37.827175 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0822 08:33:37.863423 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 08:33:37.863411368 +0000 UTC m=+96.468147890 I0822 08:33:37.885287 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 08:33:37.885268143 +0000 UTC m=+96.490004665