I0822 09:51:00.172078 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0822 09:51:00.172344 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0822 09:51:00.172418 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0822 09:51:00.172561 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 09:51:00.175217 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0822 09:51:00.175966 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0822 09:51:00.176291 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0822 09:51:00.176710 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 09:51:00.192027 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0822 09:51:00.193756 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0822 09:51:00.193796 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0822 09:51:00.194072 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0822 09:51:00.196144 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0822 09:51:00.197290 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0822 09:51:00.198289 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0822 09:51:00.199193 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0822 09:51:00.199954 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0822 09:51:00.200079 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0822 09:51:00.200824 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0822 09:51:00.201639 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0822 09:51:00.201735 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0822 09:51:00.202318 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0822 09:51:00.202715 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0822 09:51:00.205132 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0822 09:51:00.206591 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0822 09:51:00.208083 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0822 09:51:00.208297 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0822 09:51:00.208882 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0822 09:51:00.209344 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0822 09:51:00.209405 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0822 09:51:00.210003 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0822 09:51:00.210589 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0822 09:51:00.212868 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0822 09:51:25.827792 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-22 09:51:25.827754103 +0000 UTC m=+25.695406386 I0822 09:51:25.850971 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 09:51:25.850959327 +0000 UTC m=+25.718611580 I0822 09:51:25.851121 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:25.851151 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 09:51:25.851143831 +0000 UTC m=+25.718796084 I0822 09:51:25.871312 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0822 09:51:25.871545 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:25.871577 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 09:51:25.871570366 +0000 UTC m=+25.739222649 E0822 09:51:25.883838 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0822 09:51:25.884962 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18ce17d0624eb5c6", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"c0935c05-7117-4737-b864-308148fbdaa8", APIVersion:"cert-manager.io/v1", ResourceVersion:"1302", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 22, 9, 51, 25, 882627526, time.Local), LastTimestamp:time.Date(2026, time.August, 22, 9, 51, 25, 882627526, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18ce17d0624eb5c6" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0822 09:51:25.929431 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 09:51:25.929413541 +0000 UTC m=+25.797065794 I0822 09:51:25.952584 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 09:51:25.952569153 +0000 UTC m=+25.820221436 I0822 09:51:25.952984 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:25.953066 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 09:51:25.953056613 +0000 UTC m=+25.820708866 I0822 09:51:25.977211 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 09:51:25.978090 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:25.978124 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 09:51:25.978117915 +0000 UTC m=+25.845770168 E0822 09:51:26.024494 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0822 09:51:26.219385 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 09:51:26.249905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nqtnl" condition "Approved" to 2026-08-22 09:51:26.249895229 +0000 UTC m=+26.117547472 I0822 09:51:26.289847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nqtnl" condition "Ready" to 2026-08-22 09:51:26.289826364 +0000 UTC m=+26.157478637 I0822 09:51:26.367723 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:26.367711415 +0000 UTC m=+26.235363668 I0822 09:51:26.395455 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 09:51:26.395809 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:26.395802376 +0000 UTC m=+26.263454619 I0822 09:51:26.425886 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 09:51:26.426135 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:26.426129853 +0000 UTC m=+26.293782096 I0822 09:51:26.427380 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 09:51:26.746368 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 09:51:26.746355894 +0000 UTC m=+26.614008137 I0822 09:51:26.771594 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 09:51:26.771585756 +0000 UTC m=+26.639238029 I0822 09:51:26.772655 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:26.772736 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-22 09:51:26.77272947 +0000 UTC m=+26.640381753 I0822 09:51:26.791088 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 09:51:26.791160 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:26.791172 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-22 09:51:26.791168221 +0000 UTC m=+26.658820464 I0822 09:51:27.159612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-n9pfn" condition "Approved" to 2026-08-22 09:51:27.159598596 +0000 UTC m=+27.027250839 I0822 09:51:27.169512 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 09:51:27.169495819 +0000 UTC m=+27.037148072 I0822 09:51:27.188036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-n9pfn" condition "Ready" to 2026-08-22 09:51:27.18802395 +0000 UTC m=+27.055676193 I0822 09:51:27.192174 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 09:51:27.192164184 +0000 UTC m=+27.059816427 I0822 09:51:27.192307 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:27.192325 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-22 09:51:27.192322117 +0000 UTC m=+27.059974360 I0822 09:51:27.222511 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 09:51:27.222558 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 09:51:27.222549448 +0000 UTC m=+27.090201691 I0822 09:51:27.226377 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:27.226360587 +0000 UTC m=+27.094012830 I0822 09:51:27.250044 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 09:51:27.569327 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 09:51:27.645514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-crfjn" condition "Approved" to 2026-08-22 09:51:27.645502099 +0000 UTC m=+27.513154342 I0822 09:51:27.692233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-crfjn" condition "Ready" to 2026-08-22 09:51:27.692224259 +0000 UTC m=+27.559876502 I0822 09:51:27.730708 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:27.730669918 +0000 UTC m=+27.598322171 I0822 09:51:27.731280 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 09:51:27.73127403 +0000 UTC m=+27.598926283 I0822 09:51:27.758105 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 09:51:27.75809531 +0000 UTC m=+27.625747553 I0822 09:51:27.758195 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 09:51:27.758284 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:27.758814 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 09:51:27.758809755 +0000 UTC m=+27.626461998 I0822 09:51:27.786903 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 09:51:27.786988 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 09:51:27.787011 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 09:51:27.787003234 +0000 UTC m=+27.654655507 I0822 09:51:28.288082 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 09:51:28.348007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2nfhb" condition "Approved" to 2026-08-22 09:51:28.347995187 +0000 UTC m=+28.215647430 I0822 09:51:28.703716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2nfhb" condition "Ready" to 2026-08-22 09:51:28.703705736 +0000 UTC m=+28.571357989 I0822 09:51:28.951277 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:28.95125821 +0000 UTC m=+28.818910463 I0822 09:51:29.044044 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 09:51:29.044287 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 09:51:29.044282639 +0000 UTC m=+28.911934882 I0822 09:51:29.292606 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 09:51:29.341441 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0822 09:52:30.759569 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0822 09:52:30.806384 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 09:52:30.806370029 +0000 UTC m=+90.674022282 I0822 09:52:30.829949 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 09:52:30.829938561 +0000 UTC m=+90.697590814 E0822 09:52:33.137664 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0822 09:52:33.179242 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 09:52:33.179227526 +0000 UTC m=+93.046879809 I0822 09:52:33.200623 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 09:52:33.200608843 +0000 UTC m=+93.068261096 E0822 09:52:35.072697 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0822 09:52:35.121228 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 09:52:35.121215542 +0000 UTC m=+94.988867785 I0822 09:52:35.139789 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 09:52:35.139778568 +0000 UTC m=+95.007430841 E0822 09:52:36.820605 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0822 09:52:36.859032 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 09:52:36.859017684 +0000 UTC m=+96.726669967 I0822 09:52:36.877397 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 09:52:36.877386366 +0000 UTC m=+96.745038599