I0724 17:14:25.278554 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0724 17:14:25.278825 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0724 17:14:25.278927 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0724 17:14:25.279073 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 17:14:25.281565 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0724 17:14:25.282040 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0724 17:14:25.282282 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0724 17:14:25.282528 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 17:14:25.296946 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0724 17:14:25.298267 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0724 17:14:25.298975 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0724 17:14:25.300155 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0724 17:14:25.300802 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0724 17:14:25.300837 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0724 17:14:25.300848 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0724 17:14:25.301942 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0724 17:14:25.302448 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0724 17:14:25.302908 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0724 17:14:25.303534 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0724 17:14:25.303970 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0724 17:14:25.304384 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0724 17:14:25.306208 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0724 17:14:25.306239 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0724 17:14:25.307195 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0724 17:14:25.307303 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0724 17:14:25.308550 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0724 17:14:25.309841 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0724 17:14:25.310652 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0724 17:14:25.310689 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0724 17:14:25.310762 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0724 17:14:25.311339 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0724 17:14:25.311905 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0724 17:14:25.312999 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0724 17:14:51.101239 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-24 17:14:51.100538637 +0000 UTC m=+25.865864356 I0724 17:14:51.122635 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:51.122744 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-24 17:14:51.122733722 +0000 UTC m=+25.888059441 I0724 17:14:51.123242 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-24 17:14:51.123234719 +0000 UTC m=+25.888560418 E0724 17:14:51.137378 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c5492e70f68693", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"12dc2bb0-40ab-4848-93d1-b638ef855775", APIVersion:"cert-manager.io/v1", ResourceVersion:"1350", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 24, 17, 14, 51, 134797459, time.Local), LastTimestamp:time.Date(2026, time.July, 24, 17, 14, 51, 134797459, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c5492e70f68693" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0724 17:14:51.139125 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0724 17:14:51.139176 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-24 17:14:51.139168456 +0000 UTC m=+25.904494145 E0724 17:14:51.154891 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0724 17:14:51.213235 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 17:14:51.213222335 +0000 UTC m=+25.978548034 I0724 17:14:51.233700 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 17:14:51.233684792 +0000 UTC m=+25.999010481 I0724 17:14:51.233901 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:51.233961 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-24 17:14:51.233953637 +0000 UTC m=+25.999279326 I0724 17:14:51.254848 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 17:14:51.254937 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:51.254958 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-24 17:14:51.254951702 +0000 UTC m=+26.020277391 E0724 17:14:51.355664 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0724 17:14:51.558190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mtptw" condition "Approved" to 2026-07-24 17:14:51.558181476 +0000 UTC m=+26.323507155 I0724 17:14:51.602930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mtptw" condition "Ready" to 2026-07-24 17:14:51.602567575 +0000 UTC m=+26.367893274 I0724 17:14:51.683144 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:51.683133745 +0000 UTC m=+26.448459424 I0724 17:14:51.724348 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 17:14:51.724613 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:51.724607528 +0000 UTC m=+26.489933207 I0724 17:14:51.752117 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 17:14:51.752398 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:51.752391209 +0000 UTC m=+26.517716878 I0724 17:14:51.755792 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 17:14:52.078768 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 17:14:52.078750168 +0000 UTC m=+26.844075887 I0724 17:14:52.102611 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:52.102645 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-24 17:14:52.102636958 +0000 UTC m=+26.867962647 I0724 17:14:52.102655 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 17:14:52.102636998 +0000 UTC m=+26.867962687 I0724 17:14:52.135248 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 17:14:52.135333 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 17:14:52.135297563 +0000 UTC m=+26.900623242 I0724 17:14:52.562551 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 17:14:52.562540253 +0000 UTC m=+27.327865932 I0724 17:14:52.602125 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 17:14:52.602114826 +0000 UTC m=+27.367440505 I0724 17:14:52.602269 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:52.602430 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-24 17:14:52.60242328 +0000 UTC m=+27.367748959 I0724 17:14:52.625295 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 17:14:52.625373 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:52.628410 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-24 17:14:52.628372062 +0000 UTC m=+27.393697861 I0724 17:14:52.849278 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 17:14:52.879772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-fqbft" condition "Approved" to 2026-07-24 17:14:52.879763171 +0000 UTC m=+27.645088850 I0724 17:14:52.908144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-fqbft" condition "Ready" to 2026-07-24 17:14:52.90813061 +0000 UTC m=+27.673456299 I0724 17:14:52.953729 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:52.953717914 +0000 UTC m=+27.719043593 I0724 17:14:53.011111 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 17:14:53.011669 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:53.011660031 +0000 UTC m=+27.776985700 I0724 17:14:53.021595 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 17:14:53.021576834 +0000 UTC m=+27.786902513 I0724 17:14:53.024208 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 17:14:53.035287 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 17:14:53.048651 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:53.048682 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-24 17:14:53.048673292 +0000 UTC m=+27.813998981 I0724 17:14:53.050400 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 17:14:53.050394728 +0000 UTC m=+27.815720417 I0724 17:14:53.088381 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 17:14:53.088485 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 17:14:53.088514 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-24 17:14:53.088509047 +0000 UTC m=+27.853834726 I0724 17:14:53.205885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x9x9p" condition "Approved" to 2026-07-24 17:14:53.205843397 +0000 UTC m=+27.971169076 I0724 17:14:53.234730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x9x9p" condition "Ready" to 2026-07-24 17:14:53.234717623 +0000 UTC m=+28.000043302 I0724 17:14:53.281784 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:53.281773889 +0000 UTC m=+28.047099568 I0724 17:14:53.323951 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 17:14:53.324282 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:53.324275005 +0000 UTC m=+28.089600684 I0724 17:14:53.372549 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 17:14:53.624541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9cdhc" condition "Approved" to 2026-07-24 17:14:53.624528328 +0000 UTC m=+28.389854007 I0724 17:14:53.987903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9cdhc" condition "Ready" to 2026-07-24 17:14:53.987887165 +0000 UTC m=+28.753212874 I0724 17:14:54.169380 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:54.169335169 +0000 UTC m=+28.934660878 I0724 17:14:54.328413 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 17:14:54.328833 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 17:14:54.328826194 +0000 UTC m=+29.094151873 I0724 17:14:54.511786 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0724 17:16:01.467176 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0724 17:16:01.512702 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 17:16:01.512137702 +0000 UTC m=+96.277463391 I0724 17:16:01.537295 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 17:16:01.537287378 +0000 UTC m=+96.302613057 E0724 17:16:03.983514 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0724 17:16:04.026073 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 17:16:04.026060987 +0000 UTC m=+98.791386676 I0724 17:16:04.056250 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 17:16:04.056237501 +0000 UTC m=+98.821563190 E0724 17:16:05.843668 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0724 17:16:05.878894 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 17:16:05.878881773 +0000 UTC m=+100.644207462 I0724 17:16:05.897724 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 17:16:05.897715691 +0000 UTC m=+100.663041380 E0724 17:16:07.600049 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0724 17:16:07.631387 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 17:16:07.631338422 +0000 UTC m=+102.396664131 I0724 17:16:07.654202 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 17:16:07.654186915 +0000 UTC m=+102.419512634