I0822 10:16:17.464704 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0822 10:16:17.465048 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0822 10:16:17.465383 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0822 10:16:17.465583 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 10:16:17.467553 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0822 10:16:17.468146 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0822 10:16:17.468456 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0822 10:16:17.469018 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 10:16:17.488152 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0822 10:16:17.494251 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0822 10:16:17.494989 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0822 10:16:17.495726 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0822 10:16:17.495752 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0822 10:16:17.495871 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0822 10:16:17.496581 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0822 10:16:17.497143 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0822 10:16:17.497641 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0822 10:16:17.498074 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0822 10:16:17.498837 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0822 10:16:17.498932 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0822 10:16:17.499566 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0822 10:16:17.499941 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0822 10:16:17.500368 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0822 10:16:17.500667 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0822 10:16:17.500773 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0822 10:16:17.501200 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0822 10:16:17.501682 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0822 10:16:17.502004 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0822 10:16:17.502038 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0822 10:16:17.503418 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0822 10:16:17.504966 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0822 10:16:17.505070 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0822 10:16:17.505880 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0822 10:16:42.057722 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-22 10:16:42.057680217 +0000 UTC m=+24.634697904 I0822 10:16:42.193456 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:42.193501 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 10:16:42.193492468 +0000 UTC m=+24.770510195 I0822 10:16:42.193437 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 10:16:42.193422646 +0000 UTC m=+24.770440373 I0822 10:16:42.276380 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0822 10:16:42.276462 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:42.276480 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 10:16:42.276474928 +0000 UTC m=+24.853492665 E0822 10:16:42.412563 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0822 10:16:42.423395 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18ce19317b0a74f2", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"4aa91d38-c3c2-4d61-9be8-ab9cf6afdf6c", APIVersion:"cert-manager.io/v1", ResourceVersion:"1351", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 22, 10, 16, 42, 421040370, time.Local), LastTimestamp:time.Date(2026, time.August, 22, 10, 16, 42, 421040370, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18ce19317b0a74f2" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) E0822 10:16:42.648596 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0822 10:16:42.790705 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 10:16:42.79068936 +0000 UTC m=+25.367707067 I0822 10:16:43.029733 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:43.029776 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 10:16:43.029767406 +0000 UTC m=+25.606785133 I0822 10:16:43.030267 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 10:16:43.030260897 +0000 UTC m=+25.607278624 I0822 10:16:43.396841 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 10:16:43.397359 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 10:16:43.397346739 +0000 UTC m=+25.974364466 I0822 10:16:43.703942 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 10:16:43.826288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vz5cq" condition "Approved" to 2026-08-22 10:16:43.826278347 +0000 UTC m=+26.403296044 I0822 10:16:43.863947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vz5cq" condition "Ready" to 2026-08-22 10:16:43.863924542 +0000 UTC m=+26.440942249 I0822 10:16:43.905396 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:43.905377322 +0000 UTC m=+26.482395019 I0822 10:16:43.932392 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 10:16:43.932685 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:43.932677731 +0000 UTC m=+26.509695438 I0822 10:16:43.950015 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 10:16:43.957224 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0822 10:16:43.958162 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:43.958153709 +0000 UTC m=+26.535171396 I0822 10:16:44.523348 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 10:16:44.523333631 +0000 UTC m=+27.100351338 I0822 10:16:44.545635 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 10:16:44.54561939 +0000 UTC m=+27.122637097 I0822 10:16:44.545744 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:44.545787 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-22 10:16:44.545773514 +0000 UTC m=+27.122791251 I0822 10:16:44.564572 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 10:16:44.564624 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 10:16:44.564619437 +0000 UTC m=+27.141637134 I0822 10:16:44.684000 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 10:16:44.899698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-vw8d9" condition "Approved" to 2026-08-22 10:16:44.899655693 +0000 UTC m=+27.476673430 I0822 10:16:44.964076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-vw8d9" condition "Ready" to 2026-08-22 10:16:44.964062446 +0000 UTC m=+27.541080143 I0822 10:16:45.022540 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:45.022529618 +0000 UTC m=+27.599547315 I0822 10:16:45.052999 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 10:16:45.053480 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:45.053474246 +0000 UTC m=+27.630491943 I0822 10:16:45.083578 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0822 10:16:45.116724 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 10:16:45.116706512 +0000 UTC m=+27.693724239 I0822 10:16:45.136892 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 10:16:45.136881715 +0000 UTC m=+27.713899412 I0822 10:16:45.136910 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:45.136941 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-22 10:16:45.136933166 +0000 UTC m=+27.713950873 I0822 10:16:45.167309 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 10:16:45.167472 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 10:16:45.167461354 +0000 UTC m=+27.744479081 I0822 10:16:45.515684 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 10:16:45.568799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c6bcq" condition "Approved" to 2026-08-22 10:16:45.568783962 +0000 UTC m=+28.145801659 I0822 10:16:45.597882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c6bcq" condition "Ready" to 2026-08-22 10:16:45.59787339 +0000 UTC m=+28.174891077 I0822 10:16:45.637074 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:45.637063558 +0000 UTC m=+28.214081245 I0822 10:16:45.659870 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 10:16:45.660202 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:45.660197016 +0000 UTC m=+28.237214723 I0822 10:16:45.711235 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0822 10:16:45.897354 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 10:16:45.897339324 +0000 UTC m=+28.474357021 I0822 10:16:45.925236 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:45.925328 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 10:16:45.925205105 +0000 UTC m=+28.502222802 I0822 10:16:45.925353 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 10:16:45.925344088 +0000 UTC m=+28.502361785 I0822 10:16:45.956070 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 10:16:45.956129 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0822 10:16:45.956144 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 10:16:45.956139453 +0000 UTC m=+28.533157160 I0822 10:16:46.123601 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 10:16:46.200359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-st2xn" condition "Approved" to 2026-08-22 10:16:46.200344515 +0000 UTC m=+28.777362212 I0822 10:16:46.475866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-st2xn" condition "Ready" to 2026-08-22 10:16:46.475853503 +0000 UTC m=+29.052871210 I0822 10:16:46.531420 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:46.53139476 +0000 UTC m=+29.108412457 I0822 10:16:46.561487 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 10:16:46.561710 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:46.561704594 +0000 UTC m=+29.138722291 I0822 10:16:46.617455 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 10:16:46.617774 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:16:46.617765463 +0000 UTC m=+29.194783160 I0822 10:16:46.854964 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0822 10:16:46.859894 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0822 10:17:49.998330 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0822 10:17:50.044439 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 10:17:50.044398659 +0000 UTC m=+92.621416396 I0822 10:17:50.066502 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 10:17:50.066489758 +0000 UTC m=+92.643507495 E0822 10:17:52.546267 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0822 10:17:52.599303 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 10:17:52.59928345 +0000 UTC m=+95.176301157 I0822 10:17:52.627259 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 10:17:52.627238276 +0000 UTC m=+95.204256013 E0822 10:17:54.493833 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0822 10:17:54.548604 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 10:17:54.548592507 +0000 UTC m=+97.125610204 I0822 10:17:54.570483 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 10:17:54.57046297 +0000 UTC m=+97.147480677 E0822 10:17:56.405452 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0822 10:17:56.444517 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 10:17:56.444500579 +0000 UTC m=+99.021518316 I0822 10:17:56.466882 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 10:17:56.466866623 +0000 UTC m=+99.043884330