I0813 00:43:05.458314 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0813 00:43:05.458484 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0813 00:43:05.458528 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0813 00:43:05.458617 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0813 00:43:05.459744 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0813 00:43:05.460084 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0813 00:43:05.460500 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0813 00:43:05.460567 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0813 00:43:05.476414 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0813 00:43:05.476697 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0813 00:43:05.482689 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0813 00:43:05.482782 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0813 00:43:05.483501 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0813 00:43:05.484015 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0813 00:43:05.484386 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0813 00:43:05.484744 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0813 00:43:05.485197 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0813 00:43:05.485901 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0813 00:43:05.486321 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0813 00:43:05.486635 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0813 00:43:05.487038 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0813 00:43:05.487274 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0813 00:43:05.487482 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0813 00:43:05.487561 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0813 00:43:05.488046 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0813 00:43:05.488200 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0813 00:43:05.488794 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0813 00:43:05.489142 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0813 00:43:05.489297 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0813 00:43:05.489314 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0813 00:43:05.489347 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0813 00:43:05.489638 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0813 00:43:05.489887 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0813 00:43:30.709405 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-13 00:43:30.709344073 +0000 UTC m=+25.301425573 I0813 00:43:30.734366 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:30.734402 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-13 00:43:30.734394799 +0000 UTC m=+25.326476279 I0813 00:43:30.734862 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-13 00:43:30.734846906 +0000 UTC m=+25.326928466 E0813 00:43:30.755197 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18cb36b0efd92809", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"3beeed1e-a1ab-456d-b42e-dd71822b1398", APIVersion:"cert-manager.io/v1", ResourceVersion:"1306", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 13, 0, 43, 30, 748663817, time.Local), LastTimestamp:time.Date(2026, time.August, 13, 0, 43, 30, 748663817, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18cb36b0efd92809" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0813 00:43:30.755786 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0813 00:43:30.755884 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-13 00:43:30.755877097 +0000 UTC m=+25.347958577 E0813 00:43:30.765763 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0813 00:43:30.823210 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-13 00:43:30.823190548 +0000 UTC m=+25.415272028 I0813 00:43:30.843574 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:30.843613 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-13 00:43:30.84358685 +0000 UTC m=+25.435668350 I0813 00:43:30.843619 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-13 00:43:30.84361059 +0000 UTC m=+25.435692070 I0813 00:43:30.863346 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0813 00:43:30.863429 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-13 00:43:30.863401863 +0000 UTC m=+25.455483333 E0813 00:43:30.868020 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0813 00:43:31.241845 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0813 00:43:31.305530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ljsxm" condition "Approved" to 2026-08-13 00:43:31.305518709 +0000 UTC m=+25.897600189 I0813 00:43:31.342679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ljsxm" condition "Ready" to 2026-08-13 00:43:31.342645692 +0000 UTC m=+25.934727172 I0813 00:43:31.417367 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:31.417351785 +0000 UTC m=+26.009433295 I0813 00:43:31.442095 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0813 00:43:31.442389 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:31.442379801 +0000 UTC m=+26.034461281 I0813 00:43:31.477895 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0813 00:43:31.486981 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0813 00:43:31.814742 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-13 00:43:31.814731212 +0000 UTC m=+26.406812692 I0813 00:43:31.838048 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:31.838059 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-13 00:43:31.838049064 +0000 UTC m=+26.430130534 I0813 00:43:31.838076 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-13 00:43:31.838069345 +0000 UTC m=+26.430150825 I0813 00:43:31.856774 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0813 00:43:31.856825 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-13 00:43:31.856819184 +0000 UTC m=+26.448900664 I0813 00:43:32.094980 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0813 00:43:32.194463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s5cs9" condition "Approved" to 2026-08-13 00:43:32.194452094 +0000 UTC m=+26.786533574 I0813 00:43:32.238404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s5cs9" condition "Ready" to 2026-08-13 00:43:32.238388681 +0000 UTC m=+26.830470161 I0813 00:43:32.280693 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:32.280677806 +0000 UTC m=+26.872759286 I0813 00:43:32.313961 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0813 00:43:32.329526 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-13 00:43:32.329499481 +0000 UTC m=+26.921580961 I0813 00:43:32.360238 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-13 00:43:32.360223236 +0000 UTC m=+26.952304706 I0813 00:43:32.362087 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:32.362126 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-13 00:43:32.362116732 +0000 UTC m=+26.954198212 I0813 00:43:32.383060 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0813 00:43:32.383201 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:32.383230 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-13 00:43:32.383223844 +0000 UTC m=+26.975305314 I0813 00:43:32.597022 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0813 00:43:32.615294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-szmmk" condition "Approved" to 2026-08-13 00:43:32.615274293 +0000 UTC m=+27.207355763 I0813 00:43:32.669600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-szmmk" condition "Ready" to 2026-08-13 00:43:32.669590625 +0000 UTC m=+27.261672095 I0813 00:43:32.715343 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:32.715329798 +0000 UTC m=+27.307411268 I0813 00:43:32.757608 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0813 00:43:32.805367 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-13 00:43:32.805353871 +0000 UTC m=+27.397435351 I0813 00:43:32.822975 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-13 00:43:32.822959766 +0000 UTC m=+27.415041246 I0813 00:43:32.823235 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0813 00:43:32.823286 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-13 00:43:32.82327928 +0000 UTC m=+27.415360760 I0813 00:43:32.996907 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0813 00:43:33.000052 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-13 00:43:33.000042424 +0000 UTC m=+27.592123914 I0813 00:43:33.193459 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0813 00:43:33.332341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vc476" condition "Approved" to 2026-08-13 00:43:33.33231855 +0000 UTC m=+27.924400020 I0813 00:43:33.395228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vc476" condition "Ready" to 2026-08-13 00:43:33.39521393 +0000 UTC m=+27.987295400 I0813 00:43:33.882097 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:33.882079083 +0000 UTC m=+28.474160553 I0813 00:43:34.021291 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0813 00:43:34.021658 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 00:43:34.021650593 +0000 UTC m=+28.613732073 I0813 00:43:34.270782 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0813 00:43:34.322470 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0813 00:44:40.719466 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0813 00:44:40.753551 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-13 00:44:40.753536137 +0000 UTC m=+95.345617617 I0813 00:44:40.774214 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-13 00:44:40.774203712 +0000 UTC m=+95.366285192 E0813 00:44:43.071344 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0813 00:44:43.123494 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-13 00:44:43.123476904 +0000 UTC m=+97.715558384 I0813 00:44:43.149758 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-13 00:44:43.149742507 +0000 UTC m=+97.741823987 E0813 00:44:45.009394 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0813 00:44:45.062935 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-13 00:44:45.062915817 +0000 UTC m=+99.654997297 I0813 00:44:45.085267 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-13 00:44:45.085249415 +0000 UTC m=+99.677330895 E0813 00:44:46.787580 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0813 00:44:46.836766 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-13 00:44:46.836753473 +0000 UTC m=+101.428834953 I0813 00:44:46.860386 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-13 00:44:46.860372578 +0000 UTC m=+101.452454058