I0812 09:26:08.780881 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0812 09:26:08.781117 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0812 09:26:08.781179 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0812 09:26:08.781288 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 09:26:08.782450 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0812 09:26:08.782786 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0812 09:26:08.783276 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 09:26:08.783287 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0812 09:26:08.799295 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0812 09:26:08.802907 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0812 09:26:08.804947 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0812 09:26:08.807364 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0812 09:26:08.807813 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0812 09:26:08.808220 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0812 09:26:08.808314 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0812 09:26:08.809302 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0812 09:26:08.809538 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0812 09:26:08.809743 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0812 09:26:08.809759 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0812 09:26:08.809812 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0812 09:26:08.810977 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0812 09:26:08.811497 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0812 09:26:08.811521 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0812 09:26:08.812073 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0812 09:26:08.812490 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0812 09:26:08.812943 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0812 09:26:08.813279 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0812 09:26:08.813513 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0812 09:26:08.813531 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0812 09:26:08.813606 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0812 09:26:08.813961 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0812 09:26:08.814151 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0812 09:26:08.814414 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0812 09:26:39.878047 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-12 09:26:39.878013056 +0000 UTC m=+31.131315105 I0812 09:26:39.899080 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:39.899208 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 09:26:39.899186881 +0000 UTC m=+31.152488940 I0812 09:26:39.899237 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 09:26:39.899213732 +0000 UTC m=+31.152515831 I0812 09:26:39.920309 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0812 09:26:39.920387 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:39.920408 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 09:26:39.920403097 +0000 UTC m=+31.173705156 E0812 09:26:39.926953 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0812 09:26:39.931722 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18cb04a8bb812257", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"be73dcf9-5282-4726-8d9c-9dd9d681f5ad", APIVersion:"cert-manager.io/v1", ResourceVersion:"1307", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 12, 9, 26, 39, 929352791, time.Local), LastTimestamp:time.Date(2026, time.August, 12, 9, 26, 39, 929352791, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18cb04a8bb812257" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0812 09:26:39.984724 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 09:26:39.984705187 +0000 UTC m=+31.238007276 I0812 09:26:40.005496 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:40.005541 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 09:26:40.00553095 +0000 UTC m=+31.258833039 I0812 09:26:40.005790 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 09:26:40.005690326 +0000 UTC m=+31.258992385 I0812 09:26:40.020069 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:26:40.020143 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 09:26:40.020136767 +0000 UTC m=+31.273438826 I0812 09:26:40.232103 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:26:40.304572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-gvxrn" condition "Approved" to 2026-08-12 09:26:40.304562694 +0000 UTC m=+31.557864743 I0812 09:26:40.346550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-gvxrn" condition "Ready" to 2026-08-12 09:26:40.346537658 +0000 UTC m=+31.599839717 I0812 09:26:40.388637 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:40.388625037 +0000 UTC m=+31.641927096 I0812 09:26:40.421514 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" E0812 09:26:40.448313 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0812 09:26:40.490982 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:26:40.768943 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 09:26:40.768919583 +0000 UTC m=+32.022221632 I0812 09:26:40.793987 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:40.794027 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 09:26:40.79401785 +0000 UTC m=+32.047319899 I0812 09:26:40.794770 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 09:26:40.794755357 +0000 UTC m=+32.048057406 I0812 09:26:40.813997 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:26:40.814072 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:40.814094 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 09:26:40.814090001 +0000 UTC m=+32.067392040 I0812 09:26:41.197627 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 09:26:41.19761227 +0000 UTC m=+32.450914309 I0812 09:26:41.212029 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:41.212056 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 09:26:41.212048514 +0000 UTC m=+32.465350563 I0812 09:26:41.212165 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 09:26:41.212153118 +0000 UTC m=+32.465455177 I0812 09:26:41.238392 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:26:41.238473 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:41.238501 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 09:26:41.238496184 +0000 UTC m=+32.491798243 I0812 09:26:41.264921 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:26:41.276055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q5n9j" condition "Approved" to 2026-08-12 09:26:41.276035409 +0000 UTC m=+32.529337458 I0812 09:26:41.312432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q5n9j" condition "Ready" to 2026-08-12 09:26:41.312419673 +0000 UTC m=+32.565721732 I0812 09:26:41.390818 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:41.39080543 +0000 UTC m=+32.644107479 I0812 09:26:41.421333 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:26:41.421674 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:41.421668468 +0000 UTC m=+32.674970517 I0812 09:26:41.428630 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:26:41.451350 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:26:41.451508 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:41.451503369 +0000 UTC m=+32.704805418 I0812 09:26:41.734693 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:26:41.735724 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 09:26:41.735710366 +0000 UTC m=+32.989012415 I0812 09:26:41.754477 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 09:26:41.754455081 +0000 UTC m=+33.007757170 I0812 09:26:41.754897 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:41.754997 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 09:26:41.75498881 +0000 UTC m=+33.008290869 I0812 09:26:41.765334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-4kxtw" condition "Approved" to 2026-08-12 09:26:41.765321728 +0000 UTC m=+33.018623787 I0812 09:26:41.801063 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:26:41.801275 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:26:41.801437 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 09:26:41.801298937 +0000 UTC m=+33.054600996 I0812 09:26:41.818562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-4kxtw" condition "Ready" to 2026-08-12 09:26:41.81854473 +0000 UTC m=+33.071846819 I0812 09:26:41.946168 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:41.946112607 +0000 UTC m=+33.199414666 I0812 09:26:42.055278 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:26:42.059045 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:42.059037903 +0000 UTC m=+33.312339952 I0812 09:26:42.247233 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:26:42.495627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-zx72d" condition "Approved" to 2026-08-12 09:26:42.495608783 +0000 UTC m=+33.748910842 I0812 09:26:42.786055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-zx72d" condition "Ready" to 2026-08-12 09:26:42.786044267 +0000 UTC m=+34.039346316 I0812 09:26:43.096512 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:43.096397562 +0000 UTC m=+34.349699641 I0812 09:26:43.186441 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:26:43.186688 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:26:43.186681748 +0000 UTC m=+34.439983807 I0812 09:26:43.396669 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0812 09:27:43.177603 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0812 09:27:43.220916 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 09:27:43.220227865 +0000 UTC m=+94.473529924 I0812 09:27:43.241117 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 09:27:43.241105182 +0000 UTC m=+94.494407271 E0812 09:27:45.459973 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0812 09:27:45.500997 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 09:27:45.50098297 +0000 UTC m=+96.754285049 I0812 09:27:45.518974 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 09:27:45.518963913 +0000 UTC m=+96.772265962 E0812 09:27:47.258755 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0812 09:27:47.293502 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 09:27:47.293490985 +0000 UTC m=+98.546793044 I0812 09:27:47.318309 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 09:27:47.318297609 +0000 UTC m=+98.571599668 E0812 09:27:49.012222 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0812 09:27:49.064715 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 09:27:49.06470123 +0000 UTC m=+100.318003289 I0812 09:27:49.083824 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 09:27:49.083799247 +0000 UTC m=+100.337101336