I0331 00:39:46.796534 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0331 00:39:46.796724 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0331 00:39:46.796784 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0331 00:39:46.796871 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 00:39:46.798295 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0331 00:39:46.798686 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0331 00:39:46.799244 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0331 00:39:46.799611 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 00:39:46.813515 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0331 00:39:46.816937 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0331 00:39:46.819890 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0331 00:39:46.821574 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0331 00:39:46.822391 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0331 00:39:46.822944 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0331 00:39:46.822966 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0331 00:39:46.822982 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0331 00:39:46.823093 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0331 00:39:46.823499 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0331 00:39:46.824211 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0331 00:39:46.824758 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0331 00:39:46.825018 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0331 00:39:46.825091 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0331 00:39:46.825488 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0331 00:39:46.825996 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0331 00:39:46.826486 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0331 00:39:46.826542 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0331 00:39:46.827015 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0331 00:39:46.827445 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0331 00:39:46.830669 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0331 00:39:46.830677 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0331 00:39:46.830737 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0331 00:39:46.830878 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0331 00:39:46.832481 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0331 00:40:12.064691 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-31 00:40:12.064656985 +0000 UTC m=+25.308423573 I0331 00:40:12.080769 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-31 00:40:12.08074363 +0000 UTC m=+25.324510198 I0331 00:40:12.081128 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:12.081164 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-31 00:40:12.081156053 +0000 UTC m=+25.324922661 I0331 00:40:12.096276 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0331 00:40:12.096362 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:12.096389 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-31 00:40:12.096382471 +0000 UTC m=+25.340149079 E0331 00:40:12.101044 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0331 00:40:12.108918 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18a1c62a0f30ca99", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"6a88863e-21c6-4afb-9806-8d3a10c420fd", APIVersion:"cert-manager.io/v1", ResourceVersion:"1179", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.March, 31, 0, 40, 12, 106467993, time.Local), LastTimestamp:time.Date(2026, time.March, 31, 0, 40, 12, 106467993, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18a1c62a0f30ca99" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0331 00:40:12.137906 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-31 00:40:12.137893148 +0000 UTC m=+25.381659736 I0331 00:40:12.150812 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:12.151057 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-31 00:40:12.15105422 +0000 UTC m=+25.394820788 I0331 00:40:12.150942 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 00:40:12.150935236 +0000 UTC m=+25.394701804 I0331 00:40:12.169857 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 00:40:12.169939 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 00:40:12.169932704 +0000 UTC m=+25.413699272 E0331 00:40:12.202175 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0331 00:40:12.582971 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 00:40:12.626960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rhwrh" condition "Approved" to 2026-03-31 00:40:12.626950674 +0000 UTC m=+25.870717252 I0331 00:40:12.647985 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-31 00:40:12.647970877 +0000 UTC m=+25.891737445 I0331 00:40:12.657921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rhwrh" condition "Ready" to 2026-03-31 00:40:12.657909575 +0000 UTC m=+25.901676183 I0331 00:40:12.664721 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 00:40:12.664710402 +0000 UTC m=+25.908476980 I0331 00:40:12.664825 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:12.665319 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-31 00:40:12.665310812 +0000 UTC m=+25.909077380 I0331 00:40:12.690590 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 00:40:12.690746 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:12.690776 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-31 00:40:12.690770706 +0000 UTC m=+25.934537284 I0331 00:40:12.701177 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:12.701161779 +0000 UTC m=+25.944928387 I0331 00:40:12.744609 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 00:40:12.745314 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:12.745308021 +0000 UTC m=+25.989074589 I0331 00:40:12.761021 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 00:40:12.983160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j74nb" condition "Approved" to 2026-03-31 00:40:12.98315073 +0000 UTC m=+26.226917298 I0331 00:40:12.996748 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-31 00:40:12.996739785 +0000 UTC m=+26.240506353 I0331 00:40:13.014260 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:13.014288 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-31 00:40:13.014282602 +0000 UTC m=+26.258049170 I0331 00:40:13.015422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j74nb" condition "Ready" to 2026-03-31 00:40:13.015410148 +0000 UTC m=+26.259176716 I0331 00:40:13.015907 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 00:40:13.015903633 +0000 UTC m=+26.259670201 I0331 00:40:13.033442 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 00:40:13.033484 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 00:40:13.033480319 +0000 UTC m=+26.277246887 I0331 00:40:13.092556 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:13.092545719 +0000 UTC m=+26.336312277 I0331 00:40:13.134569 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 00:40:13.134890 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:13.134883218 +0000 UTC m=+26.378649786 I0331 00:40:13.155270 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 00:40:13.427507 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-31 00:40:13.42749636 +0000 UTC m=+26.671262938 I0331 00:40:13.440875 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 00:40:13.440902 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-31 00:40:13.440895904 +0000 UTC m=+26.684662482 I0331 00:40:13.441195 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 00:40:13.441190754 +0000 UTC m=+26.684957332 I0331 00:40:13.464978 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 00:40:13.465043 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 00:40:13.465037588 +0000 UTC m=+26.708804146 I0331 00:40:13.638713 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 00:40:13.640823 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 00:40:13.735843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9l9fn" condition "Approved" to 2026-03-31 00:40:13.735834389 +0000 UTC m=+26.979600957 I0331 00:40:13.751393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-wh2pk" condition "Approved" to 2026-03-31 00:40:13.75138153 +0000 UTC m=+26.995148098 I0331 00:40:13.766647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9l9fn" condition "Ready" to 2026-03-31 00:40:13.766638064 +0000 UTC m=+27.010404632 I0331 00:40:14.117027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-wh2pk" condition "Ready" to 2026-03-31 00:40:14.117019425 +0000 UTC m=+27.360785983 I0331 00:40:14.583927 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:14.583918405 +0000 UTC m=+27.827684983 I0331 00:40:14.690883 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:14.690869914 +0000 UTC m=+27.934636472 I0331 00:40:14.775346 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 00:40:14.775750 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:14.775740721 +0000 UTC m=+28.019507329 I0331 00:40:14.924082 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 00:40:14.924295 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 00:40:14.924289072 +0000 UTC m=+28.168055640 I0331 00:40:15.391004 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 00:40:15.440388 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 00:40:15.474907 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0331 00:41:21.319195 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0331 00:41:21.353301 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-31 00:41:21.353288049 +0000 UTC m=+94.597054627 I0331 00:41:21.374309 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 00:41:21.374297597 +0000 UTC m=+94.618064175 E0331 00:41:23.453172 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0331 00:41:23.488184 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-31 00:41:23.488169307 +0000 UTC m=+96.731935885 I0331 00:41:23.507081 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 00:41:23.507071603 +0000 UTC m=+96.750838171 E0331 00:41:25.156059 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0331 00:41:25.211110 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-31 00:41:25.211095055 +0000 UTC m=+98.454861623 I0331 00:41:25.234971 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 00:41:25.234959522 +0000 UTC m=+98.478726100 E0331 00:41:27.109471 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0331 00:41:27.156979 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-31 00:41:27.156967817 +0000 UTC m=+100.400734395 I0331 00:41:27.176793 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 00:41:27.17678022 +0000 UTC m=+100.420546788