I0422 12:56:42.238875       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0422 12:56:42.239021       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0422 12:56:42.239056       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0422 12:56:42.239112       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0422 12:56:42.240008       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0422 12:56:42.240264       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0422 12:56:42.240529       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0422 12:56:42.240668       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0422 12:56:42.254391       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0422 12:56:42.256251       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0422 12:56:42.256505       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0422 12:56:42.256907       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0422 12:56:42.258679       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0422 12:56:42.259230       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0422 12:56:42.259254       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0422 12:56:42.259265       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0422 12:56:42.261070       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0422 12:56:42.261334       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0422 12:56:42.261565       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0422 12:56:42.261775       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0422 12:56:42.263998       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0422 12:56:42.264032       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0422 12:56:42.264076       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0422 12:56:42.268578       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0422 12:56:42.269166       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0422 12:56:42.269248       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0422 12:56:42.269683       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0422 12:56:42.269947       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0422 12:56:42.270409       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0422 12:56:42.270645       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0422 12:56:42.270689       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0422 12:56:42.271109       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0422 12:56:42.271435       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0422 12:57:16.327916       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-22 12:57:16.327894896 +0000 UTC m=+34.128659645
I0422 12:57:16.345483       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-22 12:57:16.345473563 +0000 UTC m=+34.146238312
I0422 12:57:16.345884       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:16.345899       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-22 12:57:16.345896687 +0000 UTC m=+34.146661426
E0422 12:57:16.366603       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
I0422 12:57:16.366831       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert"
I0422 12:57:16.366982       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:16.367002       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-22 12:57:16.366997555 +0000 UTC m=+34.167762304
E0422 12:57:16.379811       1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert"
I0422 12:57:16.397508       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-22 12:57:16.397492421 +0000 UTC m=+34.198257170
I0422 12:57:16.418344       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-22 12:57:16.418333218 +0000 UTC m=+34.219097967
I0422 12:57:16.418575       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:16.418606       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-22 12:57:16.418600757 +0000 UTC m=+34.219365496
I0422 12:57:16.439829       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0422 12:57:16.439891       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:16.439915       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-22 12:57:16.439910242 +0000 UTC m=+34.240674981
I0422 12:57:16.745506       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0422 12:57:16.760157       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nhv4s" condition "Approved" to 2026-04-22 12:57:16.7601429 +0000 UTC m=+34.560907669
I0422 12:57:16.809860       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nhv4s" condition "Ready" to 2026-04-22 12:57:16.809845129 +0000 UTC m=+34.610609908
I0422 12:57:16.848559       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:16.848547883 +0000 UTC m=+34.649312632
I0422 12:57:16.880693       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0422 12:57:17.055769       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-22 12:57:17.055757464 +0000 UTC m=+34.856522203
I0422 12:57:17.086719       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-22 12:57:17.086707309 +0000 UTC m=+34.887472048
I0422 12:57:17.087991       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:17.088021       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-22 12:57:17.088015603 +0000 UTC m=+34.888780342
I0422 12:57:17.119079       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0422 12:57:17.119159       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-22 12:57:17.119151715 +0000 UTC m=+34.919916454
I0422 12:57:17.398403       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-22 12:57:17.398388711 +0000 UTC m=+35.199153450
I0422 12:57:17.418430       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:17.418455       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-22 12:57:17.418449569 +0000 UTC m=+35.219214308
I0422 12:57:17.418790       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-22 12:57:17.41878711 +0000 UTC m=+35.219551849
I0422 12:57:17.461250       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0422 12:57:17.461323       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-22 12:57:17.461316148 +0000 UTC m=+35.262080887
I0422 12:57:17.574493       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0422 12:57:17.629695       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-88wf4" condition "Approved" to 2026-04-22 12:57:17.629681966 +0000 UTC m=+35.430446725
I0422 12:57:17.694308       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0422 12:57:17.713262       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-88wf4" condition "Ready" to 2026-04-22 12:57:17.7132495 +0000 UTC m=+35.514014239
I0422 12:57:17.780445       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-22 12:57:17.78043392 +0000 UTC m=+35.581198659
I0422 12:57:17.815088       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:17.815078211 +0000 UTC m=+35.615842960
I0422 12:57:17.832508       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j6t5v" condition "Approved" to 2026-04-22 12:57:17.832497239 +0000 UTC m=+35.633261988
I0422 12:57:17.833513       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-22 12:57:17.833508193 +0000 UTC m=+35.634272942
I0422 12:57:17.833788       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0422 12:57:17.833814       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-22 12:57:17.833807834 +0000 UTC m=+35.634572583
I0422 12:57:17.900026       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0422 12:57:17.913877       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0422 12:57:17.913964       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-22 12:57:17.913955181 +0000 UTC m=+35.714719960
I0422 12:57:17.918267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j6t5v" condition "Ready" to 2026-04-22 12:57:17.918253177 +0000 UTC m=+35.719017956
I0422 12:57:18.104246       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:18.104234263 +0000 UTC m=+35.904999002
I0422 12:57:18.304643       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0422 12:57:18.304887       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:18.304881986 +0000 UTC m=+36.105646725
I0422 12:57:18.346449       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0422 12:57:18.643141       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0422 12:57:18.702314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sf9ds" condition "Approved" to 2026-04-22 12:57:18.702300413 +0000 UTC m=+36.503065162
I0422 12:57:18.860254       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sf9ds" condition "Ready" to 2026-04-22 12:57:18.86024207 +0000 UTC m=+36.661006819
I0422 12:57:19.293299       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:19.293278462 +0000 UTC m=+37.094043241
I0422 12:57:19.442524       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0422 12:57:19.445797       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 12:57:19.445756029 +0000 UTC m=+37.246520798
I0422 12:57:19.714492       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0422 12:57:19.738699       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
E0422 12:58:22.779826       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0422 12:58:22.827494       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-22 12:58:22.827480246 +0000 UTC m=+100.628244995
I0422 12:58:22.847031       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-22 12:58:22.846975615 +0000 UTC m=+100.647740354
E0422 12:58:24.970953       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0422 12:58:25.015214       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-22 12:58:25.015197305 +0000 UTC m=+102.815962064
I0422 12:58:25.038358       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-22 12:58:25.038341935 +0000 UTC m=+102.839106684
E0422 12:58:26.662320       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0422 12:58:26.700066       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-22 12:58:26.700043885 +0000 UTC m=+104.500808634
I0422 12:58:26.722401       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-22 12:58:26.722387933 +0000 UTC m=+104.523152682
E0422 12:58:28.437706       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0422 12:58:28.487264       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-22 12:58:28.48725017 +0000 UTC m=+106.288014919
I0422 12:58:28.505641       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-22 12:58:28.50563057 +0000 UTC m=+106.306395319