I0731 08:42:00.553550 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0731 08:42:00.553778 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0731 08:42:00.553830 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0731 08:42:00.553970 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0731 08:42:00.556088 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0731 08:42:00.556700 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0731 08:42:00.557507 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0731 08:42:00.558475 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0731 08:42:00.571486 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0731 08:42:00.571643 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0731 08:42:00.573460 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0731 08:42:00.573563 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0731 08:42:00.574180 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0731 08:42:00.574978 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0731 08:42:00.576178 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0731 08:42:00.577468 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0731 08:42:00.578528 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0731 08:42:00.579604 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0731 08:42:00.580273 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0731 08:42:00.580699 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0731 08:42:00.581069 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0731 08:42:00.581318 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0731 08:42:00.581340 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0731 08:42:00.581351 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0731 08:42:00.581362 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0731 08:42:00.581363 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0731 08:42:00.581804 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0731 08:42:00.582199 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0731 08:42:00.582567 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0731 08:42:00.582983 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0731 08:42:00.583493 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0731 08:42:00.583557 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0731 08:42:00.586778 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0731 08:42:26.078409 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-31 08:42:26.078376185 +0000 UTC m=+25.556716136 I0731 08:42:26.102033 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:26.102101 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-31 08:42:26.10209297 +0000 UTC m=+25.580432891 I0731 08:42:26.102137 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-31 08:42:26.102076159 +0000 UTC m=+25.580416080 E0731 08:42:26.121136 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c75348082f934a", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"8e1b2d46-ef68-4917-a862-66fe2c2a4363", APIVersion:"cert-manager.io/v1", ResourceVersion:"1353", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 31, 8, 42, 26, 115777354, time.Local), LastTimestamp:time.Date(2026, time.July, 31, 8, 42, 26, 115777354, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c75348082f934a" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0731 08:42:26.122863 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0731 08:42:26.122945 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-31 08:42:26.122936927 +0000 UTC m=+25.601276878 E0731 08:42:26.133436 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0731 08:42:26.176318 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-31 08:42:26.176306287 +0000 UTC m=+25.654646198 I0731 08:42:26.197624 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-31 08:42:26.197617693 +0000 UTC m=+25.675957614 I0731 08:42:26.199274 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:26.199306 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-31 08:42:26.199299857 +0000 UTC m=+25.677639778 I0731 08:42:26.213708 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0731 08:42:26.213828 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:26.213872 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-31 08:42:26.213868559 +0000 UTC m=+25.692208480 E0731 08:42:26.322126 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0731 08:42:26.794350 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0731 08:42:26.808628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nnmc5" condition "Approved" to 2026-07-31 08:42:26.808617562 +0000 UTC m=+26.286957483 I0731 08:42:26.849224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-nnmc5" condition "Ready" to 2026-07-31 08:42:26.849208766 +0000 UTC m=+26.327548687 I0731 08:42:26.884695 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:26.884679986 +0000 UTC m=+26.363019937 I0731 08:42:26.908722 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-31 08:42:26.908697547 +0000 UTC m=+26.387037458 I0731 08:42:26.930272 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-31 08:42:26.93025988 +0000 UTC m=+26.408599791 I0731 08:42:26.930560 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:26.930570 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-31 08:42:26.930567026 +0000 UTC m=+26.408906927 I0731 08:42:26.932299 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0731 08:42:26.958226 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0731 08:42:26.958950 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:26.959070 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-31 08:42:26.959064206 +0000 UTC m=+26.437404117 I0731 08:42:27.366248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bhbh8" condition "Approved" to 2026-07-31 08:42:27.366201609 +0000 UTC m=+26.844541540 I0731 08:42:27.397409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bhbh8" condition "Ready" to 2026-07-31 08:42:27.397396221 +0000 UTC m=+26.875736132 I0731 08:42:27.453209 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:27.453195102 +0000 UTC m=+26.931535013 I0731 08:42:27.496772 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0731 08:42:27.503511 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:27.503505624 +0000 UTC m=+26.981845535 I0731 08:42:27.518128 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0731 08:42:27.580696 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0731 08:42:27.581043 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:27.581036569 +0000 UTC m=+27.059376490 I0731 08:42:27.617897 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-31 08:42:27.617832631 +0000 UTC m=+27.096172542 I0731 08:42:27.638678 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-31 08:42:27.638665557 +0000 UTC m=+27.117005468 I0731 08:42:27.639015 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:27.639029 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-31 08:42:27.639025714 +0000 UTC m=+27.117365625 I0731 08:42:27.656412 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0731 08:42:27.656594 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:27.656617 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-31 08:42:27.656611584 +0000 UTC m=+27.134951515 I0731 08:42:28.079854 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-31 08:42:28.079840004 +0000 UTC m=+27.558179915 I0731 08:42:28.106652 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-31 08:42:28.106636605 +0000 UTC m=+27.584976526 I0731 08:42:28.106795 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:28.109634 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-31 08:42:28.109628024 +0000 UTC m=+27.587967935 I0731 08:42:28.130536 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0731 08:42:28.130602 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0731 08:42:28.130617 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-31 08:42:28.130614169 +0000 UTC m=+27.608954070 I0731 08:42:28.149138 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0731 08:42:28.155968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-md2jn" condition "Approved" to 2026-07-31 08:42:28.155958201 +0000 UTC m=+27.634298122 I0731 08:42:28.196052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-md2jn" condition "Ready" to 2026-07-31 08:42:28.196041425 +0000 UTC m=+27.674381336 I0731 08:42:28.227475 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:28.227463537 +0000 UTC m=+27.705803438 I0731 08:42:28.272038 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0731 08:42:28.272438 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:28.272431368 +0000 UTC m=+27.750771299 I0731 08:42:28.469529 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0731 08:42:29.263196 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0731 08:42:29.265791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8fjtp" condition "Approved" to 2026-07-31 08:42:29.265768249 +0000 UTC m=+28.744108200 I0731 08:42:29.315415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8fjtp" condition "Ready" to 2026-07-31 08:42:29.315405166 +0000 UTC m=+28.793745077 I0731 08:42:29.373234 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-31 08:42:29.373224545 +0000 UTC m=+28.851564456 I0731 08:42:29.470138 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0731 08:43:35.680155 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0731 08:43:35.714280 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-31 08:43:35.714268268 +0000 UTC m=+95.192608179 I0731 08:43:35.735314 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-31 08:43:35.735300485 +0000 UTC m=+95.213640406 E0731 08:43:37.884331 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0731 08:43:37.915400 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-31 08:43:37.915389462 +0000 UTC m=+97.393729383 I0731 08:43:37.944096 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-31 08:43:37.944083454 +0000 UTC m=+97.422423405 E0731 08:43:39.592089 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0731 08:43:39.628270 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-31 08:43:39.628256368 +0000 UTC m=+99.106596279 I0731 08:43:39.651963 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-31 08:43:39.651951572 +0000 UTC m=+99.130291473 E0731 08:43:41.320095 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0731 08:43:41.363411 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-31 08:43:41.363396121 +0000 UTC m=+100.841736042 I0731 08:43:41.386494 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-31 08:43:41.386484885 +0000 UTC m=+100.864824806