I0724 15:32:19.327803 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0724 15:32:19.328279 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0724 15:32:19.328421 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0724 15:32:19.328541 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 15:32:19.331768 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0724 15:32:19.332481 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0724 15:32:19.332805 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0724 15:32:19.333544 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 15:32:19.348451 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0724 15:32:19.349956 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0724 15:32:19.350470 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0724 15:32:19.350625 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0724 15:32:19.351651 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0724 15:32:19.351659 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0724 15:32:19.352837 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0724 15:32:19.353690 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0724 15:32:19.354671 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0724 15:32:19.355515 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0724 15:32:19.356034 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0724 15:32:19.356491 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0724 15:32:19.356826 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0724 15:32:19.359744 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0724 15:32:19.360157 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0724 15:32:19.361257 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0724 15:32:19.361733 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0724 15:32:19.362679 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0724 15:32:19.362698 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0724 15:32:19.362925 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0724 15:32:19.362931 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0724 15:32:19.363159 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0724 15:32:19.364635 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0724 15:32:19.365299 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0724 15:32:19.367064 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0724 15:32:48.174538 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-24 15:32:48.174501946 +0000 UTC m=+28.883951379 I0724 15:32:48.203414 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:48.203448 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-24 15:32:48.203443159 +0000 UTC m=+28.912892582 I0724 15:32:48.203473 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-24 15:32:48.203469499 +0000 UTC m=+28.912918922 I0724 15:32:48.223817 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0724 15:32:48.223893 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:48.223911 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-24 15:32:48.223905847 +0000 UTC m=+28.933355280 E0724 15:32:48.234979 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0724 15:32:48.242493 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c5439cd801b75f", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"908fd352-ec44-4abe-a375-74200f2f20f0", APIVersion:"cert-manager.io/v1", ResourceVersion:"1378", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 24, 15, 32, 48, 240219999, time.Local), LastTimestamp:time.Date(2026, time.July, 24, 15, 32, 48, 240219999, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c5439cd801b75f" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0724 15:32:48.295504 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 15:32:48.295488661 +0000 UTC m=+29.004938124 I0724 15:32:48.317697 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:48.317745 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-24 15:32:48.317718088 +0000 UTC m=+29.027167521 I0724 15:32:48.318439 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 15:32:48.318431688 +0000 UTC m=+29.027881131 I0724 15:32:48.334125 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 15:32:48.334203 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 15:32:48.334197355 +0000 UTC m=+29.043646778 E0724 15:32:48.487393 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0724 15:32:48.621876 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 15:32:48.685826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-58lb7" condition "Approved" to 2026-07-24 15:32:48.685806877 +0000 UTC m=+29.395256310 I0724 15:32:48.728934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-58lb7" condition "Ready" to 2026-07-24 15:32:48.728924142 +0000 UTC m=+29.438373575 I0724 15:32:48.780886 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:48.780870823 +0000 UTC m=+29.490320256 I0724 15:32:48.807680 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 15:32:48.808990 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:48.808977733 +0000 UTC m=+29.518427166 I0724 15:32:48.836457 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 15:32:48.840261 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 15:32:48.840828 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:48.840821716 +0000 UTC m=+29.550271129 I0724 15:32:49.194484 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 15:32:49.194462347 +0000 UTC m=+29.903911790 I0724 15:32:49.227607 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:49.227639 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-24 15:32:49.227631317 +0000 UTC m=+29.937080750 I0724 15:32:49.227873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 15:32:49.227852254 +0000 UTC m=+29.937301717 I0724 15:32:49.248949 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 15:32:49.249055 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 15:32:49.249045272 +0000 UTC m=+29.958494725 I0724 15:32:49.666825 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 15:32:49.671826 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 15:32:49.671816676 +0000 UTC m=+30.381266109 I0724 15:32:49.697290 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 15:32:49.697278162 +0000 UTC m=+30.406727585 I0724 15:32:49.697566 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:49.697586 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-24 15:32:49.697581701 +0000 UTC m=+30.407031134 I0724 15:32:49.706499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bmg46" condition "Approved" to 2026-07-24 15:32:49.706489828 +0000 UTC m=+30.415939251 I0724 15:32:49.731187 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 15:32:49.731265 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 15:32:49.731258725 +0000 UTC m=+30.440708148 I0724 15:32:49.750171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bmg46" condition "Ready" to 2026-07-24 15:32:49.75015526 +0000 UTC m=+30.459604683 I0724 15:32:49.801185 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:49.801169575 +0000 UTC m=+30.510618998 I0724 15:32:49.827691 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 15:32:49.827942 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:49.827936368 +0000 UTC m=+30.537385791 I0724 15:32:49.861861 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 15:32:50.200933 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 15:32:50.200919263 +0000 UTC m=+30.910368696 I0724 15:32:50.228146 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 15:32:50.228184 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-24 15:32:50.228176981 +0000 UTC m=+30.937626404 I0724 15:32:50.228371 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 15:32:50.228355946 +0000 UTC m=+30.937805399 I0724 15:32:50.244960 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 15:32:50.245315 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 15:32:50.245011788 +0000 UTC m=+30.954461211 I0724 15:32:50.472186 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 15:32:50.518286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-f2zgx" condition "Approved" to 2026-07-24 15:32:50.518274818 +0000 UTC m=+31.227724241 I0724 15:32:50.598209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-f2zgx" condition "Ready" to 2026-07-24 15:32:50.598195407 +0000 UTC m=+31.307644830 I0724 15:32:50.661127 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:50.661117185 +0000 UTC m=+31.370566608 I0724 15:32:50.662592 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 15:32:50.692153 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 15:32:50.692497 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:50.692490706 +0000 UTC m=+31.401940129 I0724 15:32:50.740930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-n6m7q" condition "Approved" to 2026-07-24 15:32:50.740909351 +0000 UTC m=+31.450358834 I0724 15:32:50.783910 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 15:32:50.785814 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:50.785799218 +0000 UTC m=+31.495248641 I0724 15:32:50.833051 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 15:32:51.100826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-n6m7q" condition "Ready" to 2026-07-24 15:32:51.1008161 +0000 UTC m=+31.810265533 I0724 15:32:51.488909 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:51.488891896 +0000 UTC m=+32.198341349 I0724 15:32:51.600183 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 15:32:51.600411 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 15:32:51.600405645 +0000 UTC m=+32.309855068 I0724 15:32:51.785649 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0724 15:34:07.121951 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0724 15:34:07.153975 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 15:34:07.153959957 +0000 UTC m=+107.863409390 I0724 15:34:07.173383 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 15:34:07.173370669 +0000 UTC m=+107.882820092 E0724 15:34:09.466056 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0724 15:34:09.503922 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 15:34:09.503907511 +0000 UTC m=+110.213356974 I0724 15:34:09.528153 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 15:34:09.528140483 +0000 UTC m=+110.237589916 E0724 15:34:11.352321 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0724 15:34:11.389756 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 15:34:11.389745934 +0000 UTC m=+112.099195367 I0724 15:34:11.411529 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 15:34:11.411505804 +0000 UTC m=+112.120955227 E0724 15:34:13.221667 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0724 15:34:13.266188 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 15:34:13.266178121 +0000 UTC m=+113.975627544 I0724 15:34:13.289270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 15:34:13.28924614 +0000 UTC m=+113.998695603