I0330 21:28:15.758394       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0330 21:28:15.758711       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0330 21:28:15.769118       1 options.go:259] "enabling the sig-network Gateway API certificate-shim and HTTP-01 solver" logger="cert-manager"
I0330 21:28:15.769195       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers gateway-shim ingress-shim issuers orders]" logger="cert-manager.controller"
I0330 21:28:15.769221       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0330 21:28:15.769236       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0330 21:28:15.770225       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0330 21:28:15.771455       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0330 21:28:15.771632       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0330 21:28:15.778237       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0330 21:28:15.835113       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0330 21:28:15.844822       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="gateway-shim"
I0330 21:28:15.848657       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0330 21:28:15.852744       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0330 21:28:15.860691       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0330 21:28:15.860768       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0330 21:28:15.867128       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0330 21:28:15.872213       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0330 21:28:15.875800       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0330 21:28:15.878916       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0330 21:28:15.878941       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0330 21:28:15.878951       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0330 21:28:15.878961       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0330 21:28:15.879451       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0330 21:28:15.887044       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0330 21:28:15.890786       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0330 21:28:15.894007       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0330 21:28:15.897413       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0330 21:28:15.900978       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0330 21:28:15.904352       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0330 21:28:15.908481       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0330 21:28:15.914035       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0330 21:28:15.917587       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0330 21:28:15.920643       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0330 21:28:15.924364       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0330 21:28:15.927211       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.927497       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.928085       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.928186       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.928294       1 reflector.go:359] Caches populated for *v1.HTTPRoute from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.928496       1 reflector.go:359] Caches populated for *v1.Gateway from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.928905       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.941135       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:15.992394       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:16.007518       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:16.022858       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:16.043447       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:16.057679       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0330 21:28:42.349485       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-30 21:28:42.349447697 +0000 UTC m=+26.619251329
I0330 21:28:42.363322       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-30 21:28:42.363306291 +0000 UTC m=+26.633109953
I0330 21:28:42.363334       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0330 21:28:42.363470       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-30 21:28:42.363462062 +0000 UTC m=+26.633265694
I0330 21:28:42.379942       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:42.380019       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-30 21:28:42.380010433 +0000 UTC m=+26.649814045
E0330 21:28:42.382166       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller"
I0330 21:28:42.425158       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-30 21:28:42.425138324 +0000 UTC m=+26.694941946
I0330 21:28:42.434448       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-30 21:28:42.434434217 +0000 UTC m=+26.704237839
I0330 21:28:42.433094       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0330 21:28:42.441665       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-30 21:28:42.441647175 +0000 UTC m=+26.711450807
I0330 21:28:42.459226       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:42.460583       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-30 21:28:42.460571452 +0000 UTC m=+26.730375074
I0330 21:28:42.659776       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:42.714890       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-03-30 21:28:42.714880689 +0000 UTC m=+26.984684311
I0330 21:28:42.771379       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-03-30 21:28:42.771369 +0000 UTC m=+27.041172622
I0330 21:28:42.813725       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:42.813714244 +0000 UTC m=+27.083517876
I0330 21:28:42.835140       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:42.835764       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:42.835755759 +0000 UTC m=+27.105559391
I0330 21:28:42.845492       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:42.845924       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:42.845916193 +0000 UTC m=+27.115719815
I0330 21:28:42.847816       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
E0330 21:28:42.933894       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert"
I0330 21:28:45.078367       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-30 21:28:45.078351725 +0000 UTC m=+29.348155377
I0330 21:28:45.092788       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-30 21:28:45.092774083 +0000 UTC m=+29.362577705
I0330 21:28:45.093154       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0330 21:28:45.093272       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-30 21:28:45.093262575 +0000 UTC m=+29.363066197
I0330 21:28:45.113381       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.113534       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-30 21:28:45.113522563 +0000 UTC m=+29.383326205
I0330 21:28:45.229166       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.260375       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-03-30 21:28:45.260360782 +0000 UTC m=+29.530164414
I0330 21:28:45.282387       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-03-30 21:28:45.282376287 +0000 UTC m=+29.552179909
I0330 21:28:45.339289       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:45.339279838 +0000 UTC m=+29.609083450
I0330 21:28:45.357853       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.358332       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:45.358325889 +0000 UTC m=+29.628129501
I0330 21:28:45.394393       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.394439       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-30 21:28:45.394421252 +0000 UTC m=+29.664224874
I0330 21:28:45.395189       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.395474       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:45.395465446 +0000 UTC m=+29.665269068
I0330 21:28:45.409804       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-30 21:28:45.409786244 +0000 UTC m=+29.679589856
I0330 21:28:45.409843       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0330 21:28:45.409872       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-30 21:28:45.409863905 +0000 UTC m=+29.679667527
I0330 21:28:45.424614       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.425716       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-30 21:28:45.425699721 +0000 UTC m=+29.695503353
I0330 21:28:45.761132       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.768157       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-30 21:28:45.768141113 +0000 UTC m=+30.037944725
I0330 21:28:45.781080       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-30 21:28:45.781054995 +0000 UTC m=+30.050858627
I0330 21:28:45.781820       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0330 21:28:45.781863       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-30 21:28:45.781851468 +0000 UTC m=+30.051655100
I0330 21:28:45.791316       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.791409       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-30 21:28:45.791394125 +0000 UTC m=+30.061197787
I0330 21:28:45.795439       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-03-30 21:28:45.795427853 +0000 UTC m=+30.065231485
I0330 21:28:45.812638       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-03-30 21:28:45.812621325 +0000 UTC m=+30.082424957
I0330 21:28:45.845135       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:45.84509749 +0000 UTC m=+30.114901122
I0330 21:28:45.860501       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.862626       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:45.862619024 +0000 UTC m=+30.132422656
I0330 21:28:45.879650       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.883290       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:45.931660       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:46.138425       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-03-30 21:28:46.138412478 +0000 UTC m=+30.408216100
I0330 21:28:46.469605       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-03-30 21:28:46.469595263 +0000 UTC m=+30.739398885
I0330 21:28:46.693085       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 21:28:46.693072354 +0000 UTC m=+30.962875976
I0330 21:28:46.837828       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0330 21:28:47.162228       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
E0330 21:30:04.017826       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" logger="cert-manager.controller"
I0330 21:30:04.051657       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-30 21:30:04.050956549 +0000 UTC m=+108.320760171
I0330 21:30:04.066193       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-30 21:30:04.066176596 +0000 UTC m=+108.335980228
E0330 21:30:06.094477       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" logger="cert-manager.controller"
I0330 21:30:06.126456       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-30 21:30:06.126434178 +0000 UTC m=+110.396237840
I0330 21:30:06.144217       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-30 21:30:06.14419374 +0000 UTC m=+110.413997392
E0330 21:30:07.677712       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" logger="cert-manager.controller"
I0330 21:30:07.793470       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-30 21:30:07.793449305 +0000 UTC m=+112.063252957
I0330 21:30:07.814998       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-30 21:30:07.814983098 +0000 UTC m=+112.084786750
E0330 21:30:09.408891       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" logger="cert-manager.controller"
I0330 21:30:09.446312       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-30 21:30:09.446294112 +0000 UTC m=+113.716097744
I0330 21:30:09.469280       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-30 21:30:09.469267131 +0000 UTC m=+113.739070763