I0812 00:25:01.160292 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0812 00:25:01.160699 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0812 00:25:01.160877 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0812 00:25:01.161054 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 00:25:01.162517 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0812 00:25:01.163019 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0812 00:25:01.163265 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0812 00:25:01.163670 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 00:25:01.179806 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0812 00:25:01.181156 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0812 00:25:01.186081 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0812 00:25:01.187286 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0812 00:25:01.188106 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0812 00:25:01.188128 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0812 00:25:01.188139 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0812 00:25:01.189758 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0812 00:25:01.190344 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0812 00:25:01.190648 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0812 00:25:01.190663 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0812 00:25:01.190772 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0812 00:25:01.191140 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0812 00:25:01.191587 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0812 00:25:01.191928 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0812 00:25:01.192320 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0812 00:25:01.192614 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0812 00:25:01.192657 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0812 00:25:01.193156 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0812 00:25:01.193530 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0812 00:25:01.193912 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0812 00:25:01.194304 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0812 00:25:01.194696 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0812 00:25:01.195066 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0812 00:25:01.195090 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0812 00:25:29.816933 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-12 00:25:29.816904019 +0000 UTC m=+28.691470212 I0812 00:25:29.838375 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:29.838420 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 00:25:29.838415325 +0000 UTC m=+28.712981518 I0812 00:25:29.838353 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 00:25:29.838345374 +0000 UTC m=+28.712911557 I0812 00:25:29.859256 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0812 00:25:29.859329 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:29.859343 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 00:25:29.859337639 +0000 UTC m=+28.733903832 E0812 00:25:29.870355 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0812 00:25:29.874824 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18cae720b53a6802", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"8030a2ae-1e8f-4edd-a626-2eaad58e375b", APIVersion:"cert-manager.io/v1", ResourceVersion:"1306", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 12, 0, 25, 29, 871296514, time.Local), LastTimestamp:time.Date(2026, time.August, 12, 0, 25, 29, 871296514, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18cae720b53a6802" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0812 00:25:29.922175 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 00:25:29.922158467 +0000 UTC m=+28.796724640 I0812 00:25:29.942157 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:29.942193 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 00:25:29.942186906 +0000 UTC m=+28.816753089 I0812 00:25:29.942254 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 00:25:29.942239497 +0000 UTC m=+28.816805710 I0812 00:25:29.967112 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 00:25:29.967197 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 00:25:29.967177494 +0000 UTC m=+28.841743687 E0812 00:25:30.055195 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0812 00:25:30.228780 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 00:25:30.296883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b85v2" condition "Approved" to 2026-08-12 00:25:30.296871518 +0000 UTC m=+29.171437701 I0812 00:25:30.358064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b85v2" condition "Ready" to 2026-08-12 00:25:30.358050059 +0000 UTC m=+29.232616242 I0812 00:25:30.404821 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:30.404804313 +0000 UTC m=+29.279370526 I0812 00:25:30.429197 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 00:25:30.431965 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:30.431958808 +0000 UTC m=+29.306524991 I0812 00:25:30.460580 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 00:25:30.460735 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:30.460729531 +0000 UTC m=+29.335295714 I0812 00:25:30.733501 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 00:25:30.733490056 +0000 UTC m=+29.608056239 I0812 00:25:30.756538 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 00:25:30.756525647 +0000 UTC m=+29.631091840 I0812 00:25:30.757428 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:30.757448 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 00:25:30.757444964 +0000 UTC m=+29.632011147 I0812 00:25:30.784983 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 00:25:30.785078 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 00:25:30.785072737 +0000 UTC m=+29.659638920 I0812 00:25:31.112473 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 00:25:31.177507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6rrrt" condition "Approved" to 2026-08-12 00:25:31.177494521 +0000 UTC m=+30.052060704 I0812 00:25:31.184719 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 00:25:31.184713478 +0000 UTC m=+30.059279661 I0812 00:25:31.210647 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 00:25:31.210637649 +0000 UTC m=+30.085203832 I0812 00:25:31.211164 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:31.211187 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 00:25:31.211180718 +0000 UTC m=+30.085746901 I0812 00:25:31.225225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6rrrt" condition "Ready" to 2026-08-12 00:25:31.225211207 +0000 UTC m=+30.099777400 I0812 00:25:31.229019 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 00:25:31.229097 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 00:25:31.229089086 +0000 UTC m=+30.103655279 I0812 00:25:31.287279 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:31.287120496 +0000 UTC m=+30.161686689 I0812 00:25:31.338682 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 00:25:31.338972 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:31.338965295 +0000 UTC m=+30.213531478 I0812 00:25:31.369313 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 00:25:31.374919 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:31.374906933 +0000 UTC m=+30.249473116 I0812 00:25:31.376276 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 00:25:31.656461 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 00:25:31.678008 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 00:25:31.677988682 +0000 UTC m=+30.552554875 I0812 00:25:31.704609 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 00:25:31.704590934 +0000 UTC m=+30.579157117 I0812 00:25:31.704986 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 00:25:31.705003 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 00:25:31.705001221 +0000 UTC m=+30.579567404 I0812 00:25:31.706052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9nczs" condition "Approved" to 2026-08-12 00:25:31.706037249 +0000 UTC m=+30.580603442 I0812 00:25:31.725673 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 00:25:31.725739 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 00:25:31.725733499 +0000 UTC m=+30.600299692 I0812 00:25:31.740821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9nczs" condition "Ready" to 2026-08-12 00:25:31.740810377 +0000 UTC m=+30.615376590 I0812 00:25:31.886956 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:31.88694192 +0000 UTC m=+30.761508103 I0812 00:25:32.002505 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 00:25:32.004497 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:32.004488646 +0000 UTC m=+30.879054829 I0812 00:25:32.232972 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 00:25:32.280772 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 00:25:32.431975 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 00:25:32.583760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sghsc" condition "Approved" to 2026-08-12 00:25:32.583746513 +0000 UTC m=+31.458312706 I0812 00:25:32.693132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sghsc" condition "Ready" to 2026-08-12 00:25:32.693122514 +0000 UTC m=+31.567688697 I0812 00:25:33.132725 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:33.132707664 +0000 UTC m=+32.007273857 I0812 00:25:33.283506 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 00:25:33.283962 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 00:25:33.28395279 +0000 UTC m=+32.158519003 I0812 00:25:33.527607 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 00:25:33.579009 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0812 00:26:40.573401 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0812 00:26:40.627426 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 00:26:40.627404848 +0000 UTC m=+99.501971041 I0812 00:26:40.649941 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 00:26:40.649922801 +0000 UTC m=+99.524488994 E0812 00:26:43.150281 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0812 00:26:43.201985 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 00:26:43.201968631 +0000 UTC m=+102.076534824 I0812 00:26:43.223006 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 00:26:43.222993752 +0000 UTC m=+102.097559935 E0812 00:26:45.202284 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0812 00:26:45.247043 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 00:26:45.247025429 +0000 UTC m=+104.121591622 I0812 00:26:45.275208 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 00:26:45.275187686 +0000 UTC m=+104.149753899 E0812 00:26:47.096242 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0812 00:26:47.143191 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 00:26:47.143169108 +0000 UTC m=+106.017735331 I0812 00:26:47.177253 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 00:26:47.177232664 +0000 UTC m=+106.051798887