I0812 09:04:35.682855 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0812 09:04:35.683115 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0812 09:04:35.683222 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0812 09:04:35.683361 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 09:04:35.686052 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0812 09:04:35.686599 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0812 09:04:35.686806 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0812 09:04:35.687267 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 09:04:35.700894 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0812 09:04:35.703542 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0812 09:04:35.705135 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0812 09:04:35.706177 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0812 09:04:35.707808 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0812 09:04:35.708326 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0812 09:04:35.708819 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0812 09:04:35.708852 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0812 09:04:35.708854 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0812 09:04:35.709613 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0812 09:04:35.711025 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0812 09:04:35.711110 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0812 09:04:35.711458 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0812 09:04:35.711842 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0812 09:04:35.712128 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0812 09:04:35.712464 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0812 09:04:35.712811 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0812 09:04:35.713183 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0812 09:04:35.713198 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0812 09:04:35.713248 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0812 09:04:35.715917 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0812 09:04:35.716135 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0812 09:04:35.716594 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0812 09:04:35.716913 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0812 09:04:35.718439 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0812 09:05:01.671285 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-12 09:05:01.671256616 +0000 UTC m=+26.023134828 I0812 09:05:01.689338 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 09:05:01.68932832 +0000 UTC m=+26.041206532 I0812 09:05:01.689585 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:01.689608 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 09:05:01.689603234 +0000 UTC m=+26.041481446 E0812 09:05:01.705278 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18cb037a77168ece", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"86c78477-92ef-4d44-b28c-08de4da23c84", APIVersion:"cert-manager.io/v1", ResourceVersion:"1329", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 12, 9, 5, 1, 701394126, time.Local), LastTimestamp:time.Date(2026, time.August, 12, 9, 5, 1, 701394126, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18cb037a77168ece" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0812 09:05:01.708756 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0812 09:05:01.708829 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 09:05:01.708820583 +0000 UTC m=+26.060698815 E0812 09:05:01.719152 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0812 09:05:01.771311 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 09:05:01.771290532 +0000 UTC m=+26.123168734 I0812 09:05:01.792185 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:01.792216 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 09:05:01.792208594 +0000 UTC m=+26.144086786 I0812 09:05:01.792214 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 09:05:01.792210194 +0000 UTC m=+26.144088396 I0812 09:05:01.807730 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:05:01.807830 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:01.807852 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 09:05:01.807847466 +0000 UTC m=+26.159725668 E0812 09:05:01.827073 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0812 09:05:02.024544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dfbk6" condition "Approved" to 2026-08-12 09:05:02.024535074 +0000 UTC m=+26.376413286 I0812 09:05:02.086933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dfbk6" condition "Ready" to 2026-08-12 09:05:02.086914319 +0000 UTC m=+26.438792561 I0812 09:05:02.170073 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:02.170064723 +0000 UTC m=+26.521942915 I0812 09:05:02.190510 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:05:02.192338 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:02.192331281 +0000 UTC m=+26.544209473 I0812 09:05:02.210579 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0812 09:05:02.567638 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 09:05:02.567628967 +0000 UTC m=+26.919507159 I0812 09:05:02.570296 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:02.570313 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 09:05:02.570310171 +0000 UTC m=+26.922188363 I0812 09:05:02.570496 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 09:05:02.570492154 +0000 UTC m=+26.922370356 I0812 09:05:02.593577 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:05:02.593661 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:02.593681 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 09:05:02.593676003 +0000 UTC m=+26.945554205 I0812 09:05:02.866030 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:05:02.875817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-72q67" condition "Approved" to 2026-08-12 09:05:02.875810067 +0000 UTC m=+27.227688269 I0812 09:05:02.914486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-72q67" condition "Ready" to 2026-08-12 09:05:02.914468636 +0000 UTC m=+27.266346858 I0812 09:05:02.945366 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 09:05:02.945353674 +0000 UTC m=+27.297231876 I0812 09:05:02.954041 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:02.954026016 +0000 UTC m=+27.305904258 I0812 09:05:02.970099 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0812 09:05:02.974997 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:02.975023 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 09:05:02.975017518 +0000 UTC m=+27.326895730 I0812 09:05:02.975200 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 09:05:02.97518993 +0000 UTC m=+27.327068122 I0812 09:05:03.011137 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:05:03.011273 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:03.011320 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 09:05:03.011314176 +0000 UTC m=+27.363192388 I0812 09:05:03.360946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6t7l2" condition "Approved" to 2026-08-12 09:05:03.360939026 +0000 UTC m=+27.712817228 I0812 09:05:03.380487 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 09:05:03.380477568 +0000 UTC m=+27.732355780 I0812 09:05:03.390121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6t7l2" condition "Ready" to 2026-08-12 09:05:03.390112281 +0000 UTC m=+27.741990483 I0812 09:05:03.399637 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:03.399668 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 09:05:03.399661455 +0000 UTC m=+27.751539657 I0812 09:05:03.399725 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 09:05:03.399712775 +0000 UTC m=+27.751590987 I0812 09:05:03.421894 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:05:03.421970 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0812 09:05:03.421986 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 09:05:03.421981251 +0000 UTC m=+27.773859463 I0812 09:05:03.433947 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:03.433935686 +0000 UTC m=+27.785813908 I0812 09:05:03.544131 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:05:03.544454 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:03.544448447 +0000 UTC m=+27.896326649 I0812 09:05:03.781921 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0812 09:05:04.030342 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:05:04.092113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-bp6mz" condition "Approved" to 2026-08-12 09:05:04.092094103 +0000 UTC m=+28.443972345 I0812 09:05:04.404097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-bp6mz" condition "Ready" to 2026-08-12 09:05:04.404082994 +0000 UTC m=+28.755961236 I0812 09:05:04.687669 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:04.687655321 +0000 UTC m=+29.039533533 I0812 09:05:04.781158 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:05:04.781377 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 09:05:04.781371644 +0000 UTC m=+29.133249846 I0812 09:05:05.031249 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0812 09:05:05.086463 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0812 09:06:11.079398 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0812 09:06:11.123818 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 09:06:11.123804037 +0000 UTC m=+95.475682279 I0812 09:06:11.148553 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 09:06:11.148541901 +0000 UTC m=+95.500420113 E0812 09:06:13.342867 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0812 09:06:13.381245 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 09:06:13.381231594 +0000 UTC m=+97.733109826 I0812 09:06:13.402691 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 09:06:13.402679011 +0000 UTC m=+97.754557253 E0812 09:06:15.190527 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0812 09:06:15.246872 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 09:06:15.246861566 +0000 UTC m=+99.598739768 I0812 09:06:15.267435 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 09:06:15.267423812 +0000 UTC m=+99.619302014 E0812 09:06:16.911251 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0812 09:06:16.954380 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 09:06:16.954366093 +0000 UTC m=+101.306244335 I0812 09:06:16.975838 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 09:06:16.975828979 +0000 UTC m=+101.327707181