I0831 06:21:18.563034 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0831 06:21:18.563208 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0831 06:21:18.563270 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0831 06:21:18.563374 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0831 06:21:18.565115 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0831 06:21:18.565684 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0831 06:21:18.565837 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0831 06:21:18.566410 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0831 06:21:18.585538 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0831 06:21:18.587203 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0831 06:21:18.588006 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0831 06:21:18.588031 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0831 06:21:18.589409 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0831 06:21:18.590444 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0831 06:21:18.590954 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0831 06:21:18.592181 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0831 06:21:18.592633 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0831 06:21:18.592730 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0831 06:21:18.593206 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0831 06:21:18.593236 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0831 06:21:18.593788 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0831 06:21:18.595915 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0831 06:21:18.596740 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0831 06:21:18.597510 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0831 06:21:18.597589 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0831 06:21:18.598259 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0831 06:21:18.598297 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0831 06:21:18.599129 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0831 06:21:18.599999 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0831 06:21:18.600503 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0831 06:21:18.601249 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0831 06:21:18.601876 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0831 06:21:18.601973 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0831 06:21:43.598938 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-31 06:21:43.598915382 +0000 UTC m=+25.078757703 I0831 06:21:43.619182 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:43.619207 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-31 06:21:43.619201818 +0000 UTC m=+25.099044139 I0831 06:21:43.620170 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-31 06:21:43.620158206 +0000 UTC m=+25.100000507 I0831 06:21:43.641568 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0831 06:21:43.641673 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:43.641693 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-31 06:21:43.641686504 +0000 UTC m=+25.121528835 E0831 06:21:43.649222 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0831 06:21:43.657087 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18d0cf97f6e1a06b", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"d7a8c8e2-8cf0-471e-ae58-a61a5d9a144b", APIVersion:"cert-manager.io/v1", ResourceVersion:"1398", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 31, 6, 21, 43, 655080043, time.Local), LastTimestamp:time.Date(2026, time.August, 31, 6, 21, 43, 655080043, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18d0cf97f6e1a06b" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0831 06:21:43.701024 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-31 06:21:43.701009444 +0000 UTC m=+25.180851765 I0831 06:21:43.721042 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-31 06:21:43.721033044 +0000 UTC m=+25.200875365 I0831 06:21:43.721509 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:43.721536 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-31 06:21:43.721531403 +0000 UTC m=+25.201373724 I0831 06:21:43.741574 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0831 06:21:43.741661 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:43.741684 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-31 06:21:43.741677517 +0000 UTC m=+25.221519838 E0831 06:21:43.829302 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0831 06:21:44.134743 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0831 06:21:44.147802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ltr9m" condition "Approved" to 2026-08-31 06:21:44.147792421 +0000 UTC m=+25.627634712 I0831 06:21:44.176964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ltr9m" condition "Ready" to 2026-08-31 06:21:44.176956069 +0000 UTC m=+25.656798360 I0831 06:21:44.210508 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:44.210259314 +0000 UTC m=+25.690101605 I0831 06:21:44.271091 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0831 06:21:44.271382 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:44.271364802 +0000 UTC m=+25.751207093 I0831 06:21:44.274804 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0831 06:21:44.287514 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0831 06:21:44.287683 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:44.287678264 +0000 UTC m=+25.767520555 I0831 06:21:44.426224 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-31 06:21:44.42621302 +0000 UTC m=+25.906055301 I0831 06:21:44.453394 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-31 06:21:44.453383532 +0000 UTC m=+25.933225823 I0831 06:21:44.453520 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:44.453545 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-31 06:21:44.453540875 +0000 UTC m=+25.933383166 I0831 06:21:44.473907 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0831 06:21:44.474027 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:44.474046 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-31 06:21:44.474041674 +0000 UTC m=+25.953883965 I0831 06:21:44.809253 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-31 06:21:44.809239901 +0000 UTC m=+26.289082192 I0831 06:21:44.834785 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-31 06:21:44.834774592 +0000 UTC m=+26.314616883 I0831 06:21:44.834853 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:44.834873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-31 06:21:44.834868364 +0000 UTC m=+26.314710655 I0831 06:21:44.846875 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0831 06:21:44.852049 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0831 06:21:44.852099 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:44.852115 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-31 06:21:44.852111252 +0000 UTC m=+26.331953543 I0831 06:21:44.860055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-l9zkf" condition "Approved" to 2026-08-31 06:21:44.860037918 +0000 UTC m=+26.339880209 I0831 06:21:44.881253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-l9zkf" condition "Ready" to 2026-08-31 06:21:44.881241359 +0000 UTC m=+26.361083650 I0831 06:21:44.924082 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:44.924074701 +0000 UTC m=+26.403916992 I0831 06:21:44.948004 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0831 06:21:44.950932 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:44.950918236 +0000 UTC m=+26.430760527 I0831 06:21:44.999947 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0831 06:21:45.037387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9b6q8" condition "Approved" to 2026-08-31 06:21:45.03737618 +0000 UTC m=+26.517218471 I0831 06:21:45.086317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9b6q8" condition "Ready" to 2026-08-31 06:21:45.0863068 +0000 UTC m=+26.566149091 I0831 06:21:45.290606 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-31 06:21:45.290596228 +0000 UTC m=+26.770438519 I0831 06:21:45.303206 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-31 06:21:45.30320001 +0000 UTC m=+26.783042301 I0831 06:21:45.303186 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:45.303397 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-31 06:21:45.303394233 +0000 UTC m=+26.783236534 I0831 06:21:45.312470 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:45.312461079 +0000 UTC m=+26.792303370 I0831 06:21:45.460771 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0831 06:21:45.465605 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0831 06:21:45.469514 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-31 06:21:45.469507759 +0000 UTC m=+26.949350050 I0831 06:21:45.581372 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0831 06:21:46.112405 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0831 06:21:46.170822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rg7kh" condition "Approved" to 2026-08-31 06:21:46.170802046 +0000 UTC m=+27.650644387 I0831 06:21:46.327387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rg7kh" condition "Ready" to 2026-08-31 06:21:46.327374555 +0000 UTC m=+27.807216876 I0831 06:21:46.715323 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:46.715303144 +0000 UTC m=+28.195145465 I0831 06:21:46.857703 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0831 06:21:46.861819 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 06:21:46.86181126 +0000 UTC m=+28.341653561 I0831 06:21:47.063974 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0831 06:23:09.724489 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0831 06:23:09.755673 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-31 06:23:09.755656764 +0000 UTC m=+111.235499075 I0831 06:23:09.773355 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-31 06:23:09.773344775 +0000 UTC m=+111.253187076 E0831 06:23:12.121309 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0831 06:23:12.162613 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-31 06:23:12.162601279 +0000 UTC m=+113.642443580 I0831 06:23:12.186944 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-31 06:23:12.18692862 +0000 UTC m=+113.666770941 E0831 06:23:14.061300 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0831 06:23:14.087556 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-31 06:23:14.087544043 +0000 UTC m=+115.567386374 I0831 06:23:14.109348 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-31 06:23:14.109334116 +0000 UTC m=+115.589176407 E0831 06:23:15.777852 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0831 06:23:15.811912 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-31 06:23:15.811903068 +0000 UTC m=+117.291745369 I0831 06:23:15.832429 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-31 06:23:15.832420747 +0000 UTC m=+117.312263038