I0617 20:56:31.244599 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0617 20:56:31.244902 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0617 20:56:31.244990 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0617 20:56:31.245168 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0617 20:56:31.247138 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0617 20:56:31.247681 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0617 20:56:31.247963 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0617 20:56:31.248566 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0617 20:56:31.260925 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0617 20:56:31.261921 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0617 20:56:31.262383 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0617 20:56:31.262792 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0617 20:56:31.262999 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0617 20:56:31.263483 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0617 20:56:31.264056 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0617 20:56:31.264600 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0617 20:56:31.265159 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0617 20:56:31.265213 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0617 20:56:31.265219 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0617 20:56:31.268589 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0617 20:56:31.271109 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0617 20:56:31.271919 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0617 20:56:31.272550 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0617 20:56:31.273125 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0617 20:56:31.273835 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0617 20:56:31.274087 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0617 20:56:31.274111 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0617 20:56:31.274123 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0617 20:56:31.274133 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0617 20:56:31.274245 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0617 20:56:31.274879 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0617 20:56:31.275329 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0617 20:56:31.276435 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0617 20:56:58.916256 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-17 20:56:58.916222773 +0000 UTC m=+27.710913329 I0617 20:56:58.941231 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-17 20:56:58.941217573 +0000 UTC m=+27.735908109 I0617 20:56:58.941321 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:58.941527 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-17 20:56:58.94150156 +0000 UTC m=+27.736192096 I0617 20:56:58.968167 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0617 20:56:58.968241 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:58.968258 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-17 20:56:58.968252232 +0000 UTC m=+27.762942778 E0617 20:56:58.971429 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0617 20:56:58.981988 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18b9f9d491fddf0f", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"b69dcd02-c189-431f-a950-25f2af4f39ed", APIVersion:"cert-manager.io/v1", ResourceVersion:"1340", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.June, 17, 20, 56, 58, 979458831, time.Local), LastTimestamp:time.Date(2026, time.June, 17, 20, 56, 58, 979458831, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18b9f9d491fddf0f" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0617 20:56:59.016906 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-17 20:56:59.016893548 +0000 UTC m=+27.811584074 I0617 20:56:59.035454 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-17 20:56:59.035443953 +0000 UTC m=+27.830134479 I0617 20:56:59.035513 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:59.035622 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 20:56:59.035615697 +0000 UTC m=+27.830306223 I0617 20:56:59.053413 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 20:56:59.053511 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:59.053532 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 20:56:59.053527836 +0000 UTC m=+27.848218362 E0617 20:56:59.099168 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0617 20:56:59.601077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2tgrk" condition "Approved" to 2026-06-17 20:56:59.601066134 +0000 UTC m=+28.395756660 I0617 20:56:59.635179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2tgrk" condition "Ready" to 2026-06-17 20:56:59.635167591 +0000 UTC m=+28.429858127 I0617 20:56:59.668621 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:56:59.668611052 +0000 UTC m=+28.463301578 I0617 20:56:59.691939 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 20:56:59.692230 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:56:59.692223798 +0000 UTC m=+28.486914324 I0617 20:56:59.704209 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-17 20:56:59.704197335 +0000 UTC m=+28.498887861 I0617 20:56:59.720955 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 20:56:59.725745 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 20:56:59.72572948 +0000 UTC m=+28.520420016 I0617 20:56:59.725805 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:59.725833 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-17 20:56:59.725828013 +0000 UTC m=+28.520518539 I0617 20:56:59.744984 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 20:56:59.745032 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:56:59.745043 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-17 20:56:59.745039293 +0000 UTC m=+28.539729799 I0617 20:57:00.120913 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-17 20:57:00.120902903 +0000 UTC m=+28.915593429 I0617 20:57:00.146143 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:57:00.146173 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-17 20:57:00.146165147 +0000 UTC m=+28.940855673 I0617 20:57:00.146261 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 20:57:00.146246329 +0000 UTC m=+28.940936885 I0617 20:57:00.167016 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 20:57:00.167276 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 20:57:00.167256892 +0000 UTC m=+28.961947448 I0617 20:57:00.183449 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 20:57:00.196662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pf6hm" condition "Approved" to 2026-06-17 20:57:00.196653115 +0000 UTC m=+28.991343641 I0617 20:57:00.215743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pf6hm" condition "Ready" to 2026-06-17 20:57:00.215732711 +0000 UTC m=+29.010423237 I0617 20:57:00.254999 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:00.25498659 +0000 UTC m=+29.049677126 I0617 20:57:00.326390 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 20:57:00.336279 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:00.336265664 +0000 UTC m=+29.130956180 I0617 20:57:00.485520 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 20:57:00.560853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z9r9s" condition "Approved" to 2026-06-17 20:57:00.560837465 +0000 UTC m=+29.355527981 I0617 20:57:00.583628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z9r9s" condition "Ready" to 2026-06-17 20:57:00.583619621 +0000 UTC m=+29.378310137 I0617 20:57:00.611551 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-17 20:57:00.611541849 +0000 UTC m=+29.406232365 I0617 20:57:00.623837 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:00.623827222 +0000 UTC m=+29.418517748 I0617 20:57:00.633156 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 20:57:00.633149375 +0000 UTC m=+29.427839891 I0617 20:57:00.633262 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:57:00.633269 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-17 20:57:00.633267258 +0000 UTC m=+29.427957774 I0617 20:57:00.721336 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 20:57:00.721708 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:00.721700603 +0000 UTC m=+29.516391119 I0617 20:57:00.833876 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 20:57:00.833966 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 20:57:00.833990 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-17 20:57:00.833985589 +0000 UTC m=+29.628676105 I0617 20:57:01.078560 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 20:57:01.423197 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 20:57:01.524288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4trmp" condition "Approved" to 2026-06-17 20:57:01.524273547 +0000 UTC m=+30.318964073 I0617 20:57:01.883147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4trmp" condition "Ready" to 2026-06-17 20:57:01.883134256 +0000 UTC m=+30.677824782 I0617 20:57:02.120216 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:02.120199782 +0000 UTC m=+30.914890338 I0617 20:57:02.219028 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 20:57:02.219820 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 20:57:02.219803507 +0000 UTC m=+31.014494033 I0617 20:57:02.468731 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 20:57:02.516895 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0617 20:58:08.728503 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0617 20:58:08.762048 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-17 20:58:08.76203452 +0000 UTC m=+97.556725066 I0617 20:58:08.780201 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-17 20:58:08.780190836 +0000 UTC m=+97.574881382 E0617 20:58:11.072889 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0617 20:58:11.103840 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-17 20:58:11.103826305 +0000 UTC m=+99.898516861 I0617 20:58:11.126270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 20:58:11.126252182 +0000 UTC m=+99.920942738 E0617 20:58:12.758005 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0617 20:58:12.789226 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-17 20:58:12.789210071 +0000 UTC m=+101.583900607 I0617 20:58:12.804022 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 20:58:12.804016402 +0000 UTC m=+101.598706918 E0617 20:58:14.493644 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0617 20:58:14.523809 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-17 20:58:14.523797538 +0000 UTC m=+103.318488064 I0617 20:58:14.544357 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 20:58:14.544344983 +0000 UTC m=+103.339035509