I0427 10:03:42.977385 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0427 10:03:42.977545 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0427 10:03:42.977698 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0427 10:03:42.977842 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 10:03:42.979491 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0427 10:03:42.980082 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0427 10:03:42.980404 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0427 10:03:42.980956 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 10:03:42.997607 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0427 10:03:42.997844 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0427 10:03:42.999533 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0427 10:03:43.000656 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0427 10:03:43.002935 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0427 10:03:43.004328 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0427 10:03:43.004395 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0427 10:03:43.004429 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0427 10:03:43.004440 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0427 10:03:43.005428 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0427 10:03:43.006163 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0427 10:03:43.006645 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0427 10:03:43.006797 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0427 10:03:43.007859 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0427 10:03:43.008250 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0427 10:03:43.008304 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0427 10:03:43.008331 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0427 10:03:43.008936 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0427 10:03:43.009625 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0427 10:03:43.009755 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0427 10:03:43.010608 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0427 10:03:43.011460 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0427 10:03:43.011608 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0427 10:03:43.012055 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0427 10:03:43.012258 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0427 10:04:10.419152 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-27 10:04:10.419113546 +0000 UTC m=+27.485758846 I0427 10:04:10.433022 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:10.433055 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 10:04:10.433047446 +0000 UTC m=+27.499692746 I0427 10:04:10.433603 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-27 10:04:10.433590154 +0000 UTC m=+27.500235434 E0427 10:04:10.451915 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0427 10:04:10.452406 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0427 10:04:10.452623 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:10.452645 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 10:04:10.452639551 +0000 UTC m=+27.519284841 E0427 10:04:10.462720 1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert" I0427 10:04:10.479383 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-27 10:04:10.479374572 +0000 UTC m=+27.546019882 I0427 10:04:10.495122 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 10:04:10.495109139 +0000 UTC m=+27.561754419 I0427 10:04:10.495297 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:10.495331 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 10:04:10.495323752 +0000 UTC m=+27.561969052 I0427 10:04:10.509140 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0427 10:04:10.509317 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:10.509339 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 10:04:10.509334603 +0000 UTC m=+27.575979873 I0427 10:04:10.752341 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0427 10:04:10.778531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-tjsmt" condition "Approved" to 2026-04-27 10:04:10.77849556 +0000 UTC m=+27.845140820 I0427 10:04:10.811154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-tjsmt" condition "Ready" to 2026-04-27 10:04:10.811144941 +0000 UTC m=+27.877790211 I0427 10:04:10.847505 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:10.847490508 +0000 UTC m=+27.914135798 I0427 10:04:10.879770 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0427 10:04:11.072851 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-27 10:04:11.072837242 +0000 UTC m=+28.139482522 I0427 10:04:11.095645 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:11.095671 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 10:04:11.095665494 +0000 UTC m=+28.162310764 I0427 10:04:11.095770 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-27 10:04:11.095760095 +0000 UTC m=+28.162405365 I0427 10:04:11.110861 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0427 10:04:11.110942 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:11.111002 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 10:04:11.110960143 +0000 UTC m=+28.177605453 I0427 10:04:11.400415 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-27 10:04:11.400404289 +0000 UTC m=+28.467049559 I0427 10:04:11.440117 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 10:04:11.440110954 +0000 UTC m=+28.506756224 I0427 10:04:11.440825 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:11.442084 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 10:04:11.440838074 +0000 UTC m=+28.507483344 I0427 10:04:11.456412 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0427 10:04:11.472978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-29nz8" condition "Approved" to 2026-04-27 10:04:11.472966396 +0000 UTC m=+28.539611656 I0427 10:04:11.487404 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:11.487486 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:11.487506 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 10:04:11.487500674 +0000 UTC m=+28.554145944 I0427 10:04:11.498464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-29nz8" condition "Ready" to 2026-04-27 10:04:11.498448798 +0000 UTC m=+28.565094068 I0427 10:04:11.548734 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:11.548723891 +0000 UTC m=+28.615369161 I0427 10:04:11.587483 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0427 10:04:11.587851 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:11.587845177 +0000 UTC m=+28.654490447 I0427 10:04:11.620480 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0427 10:04:11.620805 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:11.620798301 +0000 UTC m=+28.687443581 I0427 10:04:11.803966 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-27 10:04:11.803950675 +0000 UTC m=+28.870595945 I0427 10:04:11.831002 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0427 10:04:11.831025 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-27 10:04:11.831019491 +0000 UTC m=+28.897664761 I0427 10:04:11.831216 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 10:04:11.831202993 +0000 UTC m=+28.897848263 I0427 10:04:11.849826 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0427 10:04:11.852474 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 10:04:11.852465981 +0000 UTC m=+28.919111271 I0427 10:04:11.906926 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:11.916971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-mp6v6" condition "Approved" to 2026-04-27 10:04:11.916953217 +0000 UTC m=+28.983598487 I0427 10:04:11.941159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-mp6v6" condition "Ready" to 2026-04-27 10:04:11.94114854 +0000 UTC m=+29.007793830 I0427 10:04:12.292434 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:12.292421546 +0000 UTC m=+29.359066826 I0427 10:04:12.328206 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0427 10:04:12.487456 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:12.487946 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:12.487920804 +0000 UTC m=+29.554566084 I0427 10:04:12.831958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4289v" condition "Approved" to 2026-04-27 10:04:12.831947389 +0000 UTC m=+29.898592659 I0427 10:04:12.841464 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:12.884504 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:13.198207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4289v" condition "Ready" to 2026-04-27 10:04:13.198188765 +0000 UTC m=+30.264834075 I0427 10:04:13.530071 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0427 10:04:13.681893 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:13.681877807 +0000 UTC m=+30.748523087 I0427 10:04:13.782214 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0427 10:04:13.782712 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 10:04:13.782702117 +0000 UTC m=+30.849347417 I0427 10:04:13.980239 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0427 10:05:17.523198 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0427 10:05:17.559367 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-27 10:05:17.559352389 +0000 UTC m=+94.625997669 I0427 10:05:17.584922 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 10:05:17.584869173 +0000 UTC m=+94.651514483 E0427 10:05:19.707046 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0427 10:05:19.745467 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-27 10:05:19.74545034 +0000 UTC m=+96.812095640 I0427 10:05:19.764813 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-27 10:05:19.764802315 +0000 UTC m=+96.831447625 E0427 10:05:21.435694 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0427 10:05:21.489086 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-27 10:05:21.489067266 +0000 UTC m=+98.555712576 I0427 10:05:21.632888 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 10:05:21.632868941 +0000 UTC m=+98.699514251 E0427 10:05:23.370308 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0427 10:05:23.415917 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-27 10:05:23.415896292 +0000 UTC m=+100.482541602 I0427 10:05:23.440265 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 10:05:23.440249869 +0000 UTC m=+100.506895149