I0714 11:59:22.735051 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0714 11:59:22.735275 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0714 11:59:22.735340 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0714 11:59:22.735439 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 11:59:22.736780 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0714 11:59:22.739895 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0714 11:59:22.740243 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0714 11:59:22.740818 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 11:59:22.756044 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0714 11:59:22.757996 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0714 11:59:22.758764 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0714 11:59:22.759460 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0714 11:59:22.760118 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0714 11:59:22.760236 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0714 11:59:22.760895 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0714 11:59:22.761430 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0714 11:59:22.761538 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0714 11:59:22.762848 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0714 11:59:22.763424 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0714 11:59:22.763453 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0714 11:59:22.763514 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0714 11:59:22.764378 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0714 11:59:22.765067 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0714 11:59:22.765762 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0714 11:59:22.766062 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0714 11:59:22.766336 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0714 11:59:22.766592 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0714 11:59:22.766891 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0714 11:59:22.767992 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0714 11:59:22.768803 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0714 11:59:22.769531 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0714 11:59:22.769552 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0714 11:59:22.769936 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0714 11:59:46.323388 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-14 11:59:46.323362372 +0000 UTC m=+23.626347677 I0714 11:59:46.345422 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-14 11:59:46.345416659 +0000 UTC m=+23.648401964 I0714 11:59:46.345680 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:46.346120 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-14 11:59:46.346115241 +0000 UTC m=+23.649100546 E0714 11:59:46.360018 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c2262f274e5db1", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"807778b3-cf3c-48c9-9594-4b8f1f0be85f", APIVersion:"cert-manager.io/v1", ResourceVersion:"1286", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 14, 11, 59, 46, 356903345, time.Local), LastTimestamp:time.Date(2026, time.July, 14, 11, 59, 46, 356903345, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c2262f274e5db1" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0714 11:59:46.362190 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0714 11:59:46.362432 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-14 11:59:46.362422624 +0000 UTC m=+23.665407979 E0714 11:59:46.368960 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0714 11:59:46.419920 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-14 11:59:46.419907266 +0000 UTC m=+23.722892591 I0714 11:59:46.434076 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-14 11:59:46.434068345 +0000 UTC m=+23.737053690 I0714 11:59:46.434294 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:46.434438 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-14 11:59:46.434322019 +0000 UTC m=+23.737307354 I0714 11:59:46.453520 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0714 11:59:46.460742 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:46.460773 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-14 11:59:46.460768117 +0000 UTC m=+23.763753422 E0714 11:59:46.471968 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0714 11:59:46.734557 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0714 11:59:46.751171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j69jc" condition "Approved" to 2026-07-14 11:59:46.75115828 +0000 UTC m=+24.054143595 I0714 11:59:46.788681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j69jc" condition "Ready" to 2026-07-14 11:59:46.788671999 +0000 UTC m=+24.091657304 I0714 11:59:46.836594 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:46.836577595 +0000 UTC m=+24.139562940 I0714 11:59:46.859952 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0714 11:59:46.860143 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:46.860128306 +0000 UTC m=+24.163113611 I0714 11:59:46.872216 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0714 11:59:46.899421 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0714 11:59:47.203401 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-14 11:59:47.203390641 +0000 UTC m=+24.506375956 I0714 11:59:47.223825 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-14 11:59:47.223811266 +0000 UTC m=+24.526796581 I0714 11:59:47.223932 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:47.224079 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-14 11:59:47.22406602 +0000 UTC m=+24.527051355 I0714 11:59:47.240773 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0714 11:59:47.240885 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-14 11:59:47.240876506 +0000 UTC m=+24.543861841 I0714 11:59:47.507527 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0714 11:59:47.553558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f9zw8" condition "Approved" to 2026-07-14 11:59:47.553549352 +0000 UTC m=+24.856534657 I0714 11:59:47.585666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f9zw8" condition "Ready" to 2026-07-14 11:59:47.585651658 +0000 UTC m=+24.888636963 I0714 11:59:47.625244 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:47.625232638 +0000 UTC m=+24.928217943 I0714 11:59:47.643142 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-14 11:59:47.643130723 +0000 UTC m=+24.946116028 I0714 11:59:47.645504 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0714 11:59:47.649574 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:47.649570838 +0000 UTC m=+24.952556143 I0714 11:59:47.662856 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0714 11:59:47.665175 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:47.665203 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-14 11:59:47.665195904 +0000 UTC m=+24.968181209 I0714 11:59:47.666701 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-14 11:59:47.666684649 +0000 UTC m=+24.969669954 I0714 11:59:47.683287 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0714 11:59:47.699029 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0714 11:59:47.699251 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:47.699277 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-14 11:59:47.699270665 +0000 UTC m=+25.002255970 I0714 11:59:47.901597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ktp6x" condition "Approved" to 2026-07-14 11:59:47.901583707 +0000 UTC m=+25.204569012 I0714 11:59:47.991872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ktp6x" condition "Ready" to 2026-07-14 11:59:47.991856819 +0000 UTC m=+25.294842114 I0714 11:59:48.135714 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:48.135703891 +0000 UTC m=+25.438689196 I0714 11:59:48.162127 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-14 11:59:48.162116891 +0000 UTC m=+25.465102206 I0714 11:59:48.187793 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0714 11:59:48.187820 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-14 11:59:48.187812849 +0000 UTC m=+25.490798164 I0714 11:59:48.187891 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-14 11:59:48.1878674 +0000 UTC m=+25.490852695 I0714 11:59:48.233502 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0714 11:59:48.386537 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0714 11:59:48.386603 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-14 11:59:48.386596988 +0000 UTC m=+25.689582293 I0714 11:59:48.834900 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0714 11:59:48.886753 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0714 11:59:49.042027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-52ktb" condition "Approved" to 2026-07-14 11:59:49.042014167 +0000 UTC m=+26.344999482 I0714 11:59:49.101203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-52ktb" condition "Ready" to 2026-07-14 11:59:49.101190695 +0000 UTC m=+26.404176010 I0714 11:59:49.587805 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 11:59:49.587785493 +0000 UTC m=+26.890770828 I0714 11:59:49.746086 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0714 11:59:50.031274 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0714 12:01:15.425065 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0714 12:01:15.459332 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-14 12:01:15.459312089 +0000 UTC m=+112.762297404 I0714 12:01:15.480383 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-14 12:01:15.480374071 +0000 UTC m=+112.783359386 E0714 12:01:17.725732 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0714 12:01:17.770119 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-14 12:01:17.770075756 +0000 UTC m=+115.073061101 I0714 12:01:17.792827 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-14 12:01:17.792815306 +0000 UTC m=+115.095800621 E0714 12:01:19.413459 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0714 12:01:19.455130 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-14 12:01:19.455116923 +0000 UTC m=+116.758102238 I0714 12:01:19.474072 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-14 12:01:19.474055982 +0000 UTC m=+116.777041327 E0714 12:01:21.181296 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0714 12:01:21.221108 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-14 12:01:21.221058479 +0000 UTC m=+118.524043784 I0714 12:01:21.239683 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-14 12:01:21.23967606 +0000 UTC m=+118.542661365