I0823 00:31:33.889864 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0823 00:31:33.890039 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0823 00:31:33.890082 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0823 00:31:33.890224 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0823 00:31:33.891481 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0823 00:31:33.891906 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0823 00:31:33.892379 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0823 00:31:33.892628 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0823 00:31:33.907649 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0823 00:31:33.910593 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0823 00:31:33.911555 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0823 00:31:33.912106 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0823 00:31:33.912708 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0823 00:31:33.912816 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0823 00:31:33.913483 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0823 00:31:33.914342 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0823 00:31:33.914691 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0823 00:31:33.915258 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0823 00:31:33.915982 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0823 00:31:33.916232 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0823 00:31:33.916602 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0823 00:31:33.916918 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0823 00:31:33.917038 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0823 00:31:33.917530 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0823 00:31:33.917836 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0823 00:31:33.918174 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0823 00:31:33.918193 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0823 00:31:33.918343 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0823 00:31:33.918727 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0823 00:31:33.919187 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0823 00:31:33.919421 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0823 00:31:33.919443 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0823 00:31:33.920209 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0823 00:32:00.929911 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-23 00:32:00.929883442 +0000 UTC m=+27.079119970 I0823 00:32:00.949151 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-23 00:32:00.949139268 +0000 UTC m=+27.098375786 I0823 00:32:00.949880 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:00.949955 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-23 00:32:00.94994264 +0000 UTC m=+27.099179188 I0823 00:32:00.973098 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0823 00:32:00.973168 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:00.973181 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-23 00:32:00.973178095 +0000 UTC m=+27.122414623 E0823 00:32:00.978166 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0823 00:32:00.986875 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18ce47de03d21c0e", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"38a3d615-1a9e-409b-af20-1d74416bd95c", APIVersion:"cert-manager.io/v1", ResourceVersion:"1286", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 23, 0, 32, 0, 985078798, time.Local), LastTimestamp:time.Date(2026, time.August, 23, 0, 32, 0, 985078798, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18ce47de03d21c0e" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0823 00:32:01.029556 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-23 00:32:01.02953832 +0000 UTC m=+27.178774848 I0823 00:32:01.050453 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-23 00:32:01.050446343 +0000 UTC m=+27.199682871 I0823 00:32:01.050920 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:01.051016 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-23 00:32:01.051003165 +0000 UTC m=+27.200239713 I0823 00:32:01.070612 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0823 00:32:01.070767 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-23 00:32:01.070759942 +0000 UTC m=+27.219996450 I0823 00:32:01.160760 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0823 00:32:01.218965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ff6r8" condition "Approved" to 2026-08-23 00:32:01.218937863 +0000 UTC m=+27.368174381 I0823 00:32:01.267360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ff6r8" condition "Ready" to 2026-08-23 00:32:01.267351243 +0000 UTC m=+27.416587761 E0823 00:32:01.320918 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0823 00:32:01.326315 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:01.326309349 +0000 UTC m=+27.475545867 I0823 00:32:01.381853 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0823 00:32:01.382075 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:01.382071006 +0000 UTC m=+27.531307524 I0823 00:32:01.417564 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0823 00:32:01.818714 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-23 00:32:01.818702471 +0000 UTC m=+27.967938989 I0823 00:32:01.840538 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-23 00:32:01.840529151 +0000 UTC m=+27.989765679 I0823 00:32:01.840591 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:01.843319 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-23 00:32:01.843309293 +0000 UTC m=+27.992545841 I0823 00:32:01.868900 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0823 00:32:01.868976 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-23 00:32:01.868969097 +0000 UTC m=+28.018205625 I0823 00:32:02.243445 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-23 00:32:02.243410515 +0000 UTC m=+28.392647043 I0823 00:32:02.265490 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:02.265518 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-23 00:32:02.265509857 +0000 UTC m=+28.414746385 I0823 00:32:02.265868 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-23 00:32:02.265864481 +0000 UTC m=+28.415101009 I0823 00:32:02.289246 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0823 00:32:02.289292 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:02.289302 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-23 00:32:02.289299037 +0000 UTC m=+28.438535555 I0823 00:32:02.311448 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0823 00:32:02.351762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4qtqs" condition "Approved" to 2026-08-23 00:32:02.351748185 +0000 UTC m=+28.500984713 I0823 00:32:02.386768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4qtqs" condition "Ready" to 2026-08-23 00:32:02.386758873 +0000 UTC m=+28.535995391 I0823 00:32:02.421421 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:02.421410877 +0000 UTC m=+28.570647395 I0823 00:32:02.458949 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0823 00:32:02.459698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hv48x" condition "Approved" to 2026-08-23 00:32:02.459686469 +0000 UTC m=+28.608922987 I0823 00:32:02.526509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hv48x" condition "Ready" to 2026-08-23 00:32:02.526494174 +0000 UTC m=+28.675730692 I0823 00:32:02.601519 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:02.601507695 +0000 UTC m=+28.750744203 I0823 00:32:02.645206 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0823 00:32:02.718403 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-23 00:32:02.718390694 +0000 UTC m=+28.867627222 I0823 00:32:02.735176 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-23 00:32:02.735166898 +0000 UTC m=+28.884403446 I0823 00:32:02.735271 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:02.735427 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-23 00:32:02.735420289 +0000 UTC m=+28.884656847 I0823 00:32:02.894380 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0823 00:32:02.894462 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0823 00:32:02.894480 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-23 00:32:02.894474428 +0000 UTC m=+29.043710956 I0823 00:32:03.442170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h8ljr" condition "Approved" to 2026-08-23 00:32:03.442154219 +0000 UTC m=+29.591390767 I0823 00:32:03.650596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h8ljr" condition "Ready" to 2026-08-23 00:32:03.650583996 +0000 UTC m=+29.799820524 I0823 00:32:03.946320 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:03.946280246 +0000 UTC m=+30.095516794 I0823 00:32:04.092703 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0823 00:32:04.093131 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-23 00:32:04.093125813 +0000 UTC m=+30.242362331 I0823 00:32:04.394514 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0823 00:32:04.444954 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0823 00:33:07.089756 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0823 00:33:07.121218 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-23 00:33:07.121204005 +0000 UTC m=+93.270440553 I0823 00:33:07.144817 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-23 00:33:07.144800596 +0000 UTC m=+93.294037124 E0823 00:33:09.359012 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0823 00:33:09.391018 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-23 00:33:09.391006461 +0000 UTC m=+95.540243019 I0823 00:33:09.416747 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-23 00:33:09.416731871 +0000 UTC m=+95.565968399 E0823 00:33:11.172006 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0823 00:33:11.203912 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-23 00:33:11.203893679 +0000 UTC m=+97.353130207 I0823 00:33:11.224121 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-23 00:33:11.224105387 +0000 UTC m=+97.373341905 E0823 00:33:12.946177 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0823 00:33:12.998107 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-23 00:33:12.998087537 +0000 UTC m=+99.147324095 I0823 00:33:13.019571 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-23 00:33:13.01956133 +0000 UTC m=+99.168797888