I0420 17:39:09.783068 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0420 17:39:09.783299 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0420 17:39:09.783375 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0420 17:39:09.783531 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 17:39:09.785424 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0420 17:39:09.785851 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0420 17:39:09.785944 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0420 17:39:09.786300 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 17:39:09.805786 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0420 17:39:09.806181 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0420 17:39:09.807986 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0420 17:39:09.809432 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0420 17:39:09.811024 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0420 17:39:09.811070 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0420 17:39:09.811106 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0420 17:39:09.811313 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0420 17:39:09.814258 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0420 17:39:09.814754 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0420 17:39:09.815091 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0420 17:39:09.815568 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0420 17:39:09.815849 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0420 17:39:09.816233 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0420 17:39:09.816562 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0420 17:39:09.816606 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0420 17:39:09.817768 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0420 17:39:09.818230 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0420 17:39:09.818463 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0420 17:39:09.818854 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0420 17:39:09.819105 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0420 17:39:09.819163 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0420 17:39:09.819505 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0420 17:39:09.819839 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0420 17:39:09.820792 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0420 17:39:34.710219 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-20 17:39:34.710146095 +0000 UTC m=+24.960412265 I0420 17:39:34.723341 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-20 17:39:34.723330212 +0000 UTC m=+24.973596352 I0420 17:39:34.723458 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:34.723479 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-20 17:39:34.723474095 +0000 UTC m=+24.973740245 I0420 17:39:34.739158 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0420 17:39:34.739288 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:34.739312 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-20 17:39:34.739306904 +0000 UTC m=+24.989573054 E0420 17:39:34.740510 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0420 17:39:34.748788 1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert" I0420 17:39:34.766548 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-20 17:39:34.766535147 +0000 UTC m=+25.016801297 I0420 17:39:34.778650 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-20 17:39:34.778641419 +0000 UTC m=+25.028907559 I0420 17:39:34.779393 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:34.779425 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-20 17:39:34.779418367 +0000 UTC m=+25.029684517 I0420 17:39:34.794138 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0420 17:39:34.794233 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:34.794254 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-20 17:39:34.794249332 +0000 UTC m=+25.044515472 I0420 17:39:35.125264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-n29gk" condition "Approved" to 2026-04-20 17:39:35.125256739 +0000 UTC m=+25.375522889 I0420 17:39:35.154271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-n29gk" condition "Ready" to 2026-04-20 17:39:35.154257965 +0000 UTC m=+25.404524135 I0420 17:39:35.179868 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.179857612 +0000 UTC m=+25.430123762 I0420 17:39:35.209337 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0420 17:39:35.209840 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.209741318 +0000 UTC m=+25.460007458 I0420 17:39:35.223710 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0420 17:39:35.223997 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.22399082 +0000 UTC m=+25.474256960 I0420 17:39:35.283039 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-20 17:39:35.282992475 +0000 UTC m=+25.533258625 I0420 17:39:35.293077 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:35.293102 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-20 17:39:35.29309832 +0000 UTC m=+25.543364470 I0420 17:39:35.293346 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-20 17:39:35.293329337 +0000 UTC m=+25.543595507 I0420 17:39:35.312610 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0420 17:39:35.312674 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-20 17:39:35.312669257 +0000 UTC m=+25.562935407 I0420 17:39:35.555833 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-20 17:39:35.555818014 +0000 UTC m=+25.806084174 I0420 17:39:35.574065 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-20 17:39:35.574054659 +0000 UTC m=+25.824320799 I0420 17:39:35.574147 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:35.574178 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-20 17:39:35.574172202 +0000 UTC m=+25.824438342 I0420 17:39:35.600185 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0420 17:39:35.604992 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0420 17:39:35.605051 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-20 17:39:35.605047182 +0000 UTC m=+25.855313322 I0420 17:39:35.654421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-hlqqp" condition "Approved" to 2026-04-20 17:39:35.654408351 +0000 UTC m=+25.904674501 I0420 17:39:35.700628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-hlqqp" condition "Ready" to 2026-04-20 17:39:35.700620409 +0000 UTC m=+25.950886549 I0420 17:39:35.760743 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.76073489 +0000 UTC m=+26.011001030 I0420 17:39:35.800577 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0420 17:39:35.821888 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.821876245 +0000 UTC m=+26.072142385 I0420 17:39:35.851593 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0420 17:39:35.852822 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:35.852816906 +0000 UTC m=+26.103083046 I0420 17:39:35.853987 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0420 17:39:35.877686 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-20 17:39:35.877624134 +0000 UTC m=+26.127890284 I0420 17:39:35.903897 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0420 17:39:35.903928 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-20 17:39:35.903923067 +0000 UTC m=+26.154189207 I0420 17:39:35.903967 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-20 17:39:35.903959378 +0000 UTC m=+26.154225518 I0420 17:39:35.928789 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0420 17:39:35.928847 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-20 17:39:35.928842718 +0000 UTC m=+26.179108858 I0420 17:39:36.012644 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0420 17:39:36.046545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wccc8" condition "Approved" to 2026-04-20 17:39:36.046045981 +0000 UTC m=+26.296312131 I0420 17:39:36.290871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wccc8" condition "Ready" to 2026-04-20 17:39:36.290863167 +0000 UTC m=+26.541129307 I0420 17:39:36.691215 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0420 17:39:36.693478 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:36.693463594 +0000 UTC m=+26.943729744 I0420 17:39:36.773882 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0420 17:39:36.774162 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:36.774155978 +0000 UTC m=+27.024422128 I0420 17:39:37.092234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pfp66" condition "Approved" to 2026-04-20 17:39:37.092216917 +0000 UTC m=+27.342483087 I0420 17:39:37.161244 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0420 17:39:37.171728 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0420 17:39:37.286424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pfp66" condition "Ready" to 2026-04-20 17:39:37.286411006 +0000 UTC m=+27.536677186 I0420 17:39:37.779280 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:37.779260609 +0000 UTC m=+28.029526749 I0420 17:39:37.922234 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0420 17:39:37.922526 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 17:39:37.922520499 +0000 UTC m=+28.172786649 I0420 17:39:38.125205 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0420 17:40:42.508096 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0420 17:40:42.544414 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-20 17:40:42.544393226 +0000 UTC m=+92.794659376 I0420 17:40:42.566884 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-20 17:40:42.566874424 +0000 UTC m=+92.817140574 E0420 17:40:44.485666 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0420 17:40:44.517269 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-20 17:40:44.51725726 +0000 UTC m=+94.767523410 I0420 17:40:44.536570 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-20 17:40:44.53655863 +0000 UTC m=+94.786824780 E0420 17:40:45.956438 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0420 17:40:45.991571 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-20 17:40:45.991555655 +0000 UTC m=+96.241821805 I0420 17:40:46.011564 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-20 17:40:46.011551264 +0000 UTC m=+96.261817434 E0420 17:40:47.593850 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0420 17:40:47.624333 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-20 17:40:47.624317765 +0000 UTC m=+97.874583945 I0420 17:40:47.651988 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-20 17:40:47.651974524 +0000 UTC m=+97.902240674