I0725 00:52:43.797486 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0725 00:52:43.797640 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0725 00:52:43.797687 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0725 00:52:43.797777 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0725 00:52:43.799057 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0725 00:52:43.799389 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0725 00:52:43.799674 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0725 00:52:43.799824 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0725 00:52:43.812469 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0725 00:52:43.812765 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0725 00:52:43.813842 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0725 00:52:43.814411 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0725 00:52:43.815023 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0725 00:52:43.817796 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0725 00:52:43.817826 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0725 00:52:43.818056 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0725 00:52:43.818250 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0725 00:52:43.818962 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0725 00:52:43.819563 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0725 00:52:43.820152 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0725 00:52:43.820312 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0725 00:52:43.822106 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0725 00:52:43.822994 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0725 00:52:43.823588 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0725 00:52:43.824097 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0725 00:52:43.824600 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0725 00:52:43.825035 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0725 00:52:43.825126 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0725 00:52:43.825560 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0725 00:52:43.826064 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0725 00:52:43.826526 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0725 00:52:43.827204 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0725 00:52:43.829977 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0725 00:53:07.326489 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-25 00:53:07.326452528 +0000 UTC m=+23.569379315 I0725 00:53:07.351252 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:07.351373 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-25 00:53:07.351359459 +0000 UTC m=+23.594286286 I0725 00:53:07.351560 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-25 00:53:07.351541184 +0000 UTC m=+23.594468011 E0725 00:53:07.365711 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c5623067e78c76", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"d23f26ac-143f-4662-b040-50fda4e89a32", APIVersion:"cert-manager.io/v1", ResourceVersion:"1334", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 25, 0, 53, 7, 363449974, time.Local), LastTimestamp:time.Date(2026, time.July, 25, 0, 53, 7, 363449974, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c5623067e78c76" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0725 00:53:07.371389 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0725 00:53:07.371517 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-25 00:53:07.37151069 +0000 UTC m=+23.614437467 E0725 00:53:07.379044 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0725 00:53:07.429161 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-25 00:53:07.429149161 +0000 UTC m=+23.672075968 E0725 00:53:07.448526 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0725 00:53:07.451455 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:07.451486 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-25 00:53:07.451479927 +0000 UTC m=+23.694406714 I0725 00:53:07.451653 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-25 00:53:07.451649692 +0000 UTC m=+23.694576479 I0725 00:53:07.481468 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0725 00:53:07.481642 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:07.481676 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-25 00:53:07.481670092 +0000 UTC m=+23.724596869 I0725 00:53:07.726607 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0725 00:53:07.735411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-kn882" condition "Approved" to 2026-07-25 00:53:07.735396117 +0000 UTC m=+23.978322904 I0725 00:53:07.840065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-kn882" condition "Ready" to 2026-07-25 00:53:07.840045157 +0000 UTC m=+24.082971934 I0725 00:53:07.942489 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:07.942476942 +0000 UTC m=+24.185403719 I0725 00:53:07.965786 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0725 00:53:07.966221 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:07.966216589 +0000 UTC m=+24.209143366 I0725 00:53:07.991857 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0725 00:53:08.001227 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0725 00:53:08.302620 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-25 00:53:08.302604786 +0000 UTC m=+24.545531563 I0725 00:53:08.358764 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:08.358797 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-25 00:53:08.35879043 +0000 UTC m=+24.601717207 I0725 00:53:08.359098 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-25 00:53:08.359095318 +0000 UTC m=+24.602022095 I0725 00:53:08.401558 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0725 00:53:08.401834 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-25 00:53:08.401643255 +0000 UTC m=+24.644570032 I0725 00:53:08.815772 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-25 00:53:08.815760823 +0000 UTC m=+25.058687600 I0725 00:53:08.841697 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-25 00:53:08.841683706 +0000 UTC m=+25.084610473 I0725 00:53:08.842819 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0725 00:53:08.841773 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:08.843138 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-25 00:53:08.843125568 +0000 UTC m=+25.086052405 I0725 00:53:08.870995 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0725 00:53:08.871118 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:08.871145 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-25 00:53:08.871139902 +0000 UTC m=+25.114066689 I0725 00:53:08.879496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-mtrkg" condition "Approved" to 2026-07-25 00:53:08.879483215 +0000 UTC m=+25.122410002 I0725 00:53:08.917667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-mtrkg" condition "Ready" to 2026-07-25 00:53:08.917647234 +0000 UTC m=+25.160574011 I0725 00:53:08.954885 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:08.954869895 +0000 UTC m=+25.197796672 I0725 00:53:08.989668 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0725 00:53:09.115100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hvljp" condition "Approved" to 2026-07-25 00:53:09.115087212 +0000 UTC m=+25.358013989 I0725 00:53:09.150500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hvljp" condition "Ready" to 2026-07-25 00:53:09.150479312 +0000 UTC m=+25.393406079 I0725 00:53:09.216290 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:09.216266306 +0000 UTC m=+25.459193083 I0725 00:53:09.260826 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0725 00:53:09.261485 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:09.261477319 +0000 UTC m=+25.504404096 I0725 00:53:09.265764 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-25 00:53:09.265747791 +0000 UTC m=+25.508674568 I0725 00:53:09.288802 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-25 00:53:09.288792225 +0000 UTC m=+25.531719032 I0725 00:53:09.289315 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:09.289360 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-25 00:53:09.289350901 +0000 UTC m=+25.532277698 I0725 00:53:09.347517 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0725 00:53:09.565221 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0725 00:53:09.565320 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0725 00:53:09.565337 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-25 00:53:09.565333009 +0000 UTC m=+25.808259786 I0725 00:53:09.614063 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0725 00:53:10.425413 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0725 00:53:10.432854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-27qxq" condition "Approved" to 2026-07-25 00:53:10.4328433 +0000 UTC m=+26.675770087 I0725 00:53:10.462858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-27qxq" condition "Ready" to 2026-07-25 00:53:10.462842656 +0000 UTC m=+26.705769473 I0725 00:53:10.592419 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:10.592399153 +0000 UTC m=+26.835325940 I0725 00:53:10.688003 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0725 00:53:10.688710 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 00:53:10.688699852 +0000 UTC m=+26.931626669 I0725 00:53:10.940066 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0725 00:53:10.995661 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0725 00:54:16.653001 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0725 00:54:16.688715 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-25 00:54:16.68870359 +0000 UTC m=+92.931630377 I0725 00:54:16.709756 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-25 00:54:16.709749025 +0000 UTC m=+92.952675802 E0725 00:54:19.158354 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0725 00:54:19.212624 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-25 00:54:19.212607981 +0000 UTC m=+95.455534768 I0725 00:54:19.235554 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-25 00:54:19.235547203 +0000 UTC m=+95.478473990 E0725 00:54:21.086797 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0725 00:54:21.127878 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-25 00:54:21.12786288 +0000 UTC m=+97.370789667 I0725 00:54:21.153025 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-25 00:54:21.153005636 +0000 UTC m=+97.395932443 E0725 00:54:23.152237 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0725 00:54:23.344747 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-25 00:54:23.344725889 +0000 UTC m=+99.587652696 I0725 00:54:23.437575 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-25 00:54:23.437550883 +0000 UTC m=+99.680477690