I0724 16:32:25.083128 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0724 16:32:25.083286 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0724 16:32:25.083333 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0724 16:32:25.083418 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 16:32:25.084657 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0724 16:32:25.085003 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0724 16:32:25.085090 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0724 16:32:25.085493 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 16:32:25.101384 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0724 16:32:25.101657 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0724 16:32:25.102932 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0724 16:32:25.103209 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0724 16:32:25.104926 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0724 16:32:25.106259 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0724 16:32:25.107081 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0724 16:32:25.107610 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0724 16:32:25.108078 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0724 16:32:25.108943 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0724 16:32:25.111584 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0724 16:32:25.113398 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0724 16:32:25.114103 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0724 16:32:25.114482 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0724 16:32:25.114883 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0724 16:32:25.114909 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0724 16:32:25.114985 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0724 16:32:25.115588 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0724 16:32:25.116115 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0724 16:32:25.116867 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0724 16:32:25.117373 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0724 16:32:25.117697 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0724 16:32:25.117721 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0724 16:32:25.117824 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0724 16:32:25.118371 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0724 16:32:50.584477 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-24 16:32:50.584435039 +0000 UTC m=+25.539952395 I0724 16:32:50.603791 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-24 16:32:50.603780424 +0000 UTC m=+25.559297740 I0724 16:32:50.603944 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:50.604002 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-24 16:32:50.603985336 +0000 UTC m=+25.559502662 I0724 16:32:50.628789 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0724 16:32:50.628864 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:50.628879 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-24 16:32:50.628872676 +0000 UTC m=+25.584390012 E0724 16:32:50.641479 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c546e397b4e38e", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"84b8377f-c315-4019-880c-0e34f149d7dd", APIVersion:"cert-manager.io/v1", ResourceVersion:"1322", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 24, 16, 32, 50, 639004558, time.Local), LastTimestamp:time.Date(2026, time.July, 24, 16, 32, 50, 639004558, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c546e397b4e38e" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) E0724 16:32:50.642959 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0724 16:32:50.702460 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 16:32:50.702444775 +0000 UTC m=+25.657962131 I0724 16:32:50.720673 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:50.720713 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-24 16:32:50.720706349 +0000 UTC m=+25.676223705 I0724 16:32:50.720675 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 16:32:50.720664358 +0000 UTC m=+25.676181684 I0724 16:32:50.742293 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 16:32:50.742354 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:50.742371 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-24 16:32:50.742366717 +0000 UTC m=+25.697884043 I0724 16:32:51.055494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-n6mw6" condition "Approved" to 2026-07-24 16:32:51.055484793 +0000 UTC m=+26.011002109 I0724 16:32:51.098816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-n6mw6" condition "Ready" to 2026-07-24 16:32:51.098798008 +0000 UTC m=+26.054315334 I0724 16:32:51.146728 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:51.146716409 +0000 UTC m=+26.102233735 I0724 16:32:51.183761 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 16:32:51.184010 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:51.184005204 +0000 UTC m=+26.139522510 I0724 16:32:51.222728 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0724 16:32:51.223145 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:51.223135917 +0000 UTC m=+26.178653223 E0724 16:32:51.293235 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0724 16:32:51.492143 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 16:32:51.492043187 +0000 UTC m=+26.447560513 I0724 16:32:51.509340 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 16:32:51.50932307 +0000 UTC m=+26.464840396 I0724 16:32:51.509364 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:51.509392 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-24 16:32:51.509384862 +0000 UTC m=+26.464902188 I0724 16:32:51.534162 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 16:32:51.534273 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 16:32:51.534267921 +0000 UTC m=+26.489785227 I0724 16:32:51.917569 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 16:32:51.91755923 +0000 UTC m=+26.873076546 I0724 16:32:51.946795 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:51.946827 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-24 16:32:51.946819834 +0000 UTC m=+26.902337150 I0724 16:32:51.947239 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 16:32:51.947233728 +0000 UTC m=+26.902751044 I0724 16:32:51.964700 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 16:32:51.964787 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:51.964809 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-24 16:32:51.964804785 +0000 UTC m=+26.920322111 I0724 16:32:52.075049 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 16:32:52.154160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kfkjc" condition "Approved" to 2026-07-24 16:32:52.154149294 +0000 UTC m=+27.109666610 I0724 16:32:52.192971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kfkjc" condition "Ready" to 2026-07-24 16:32:52.192945074 +0000 UTC m=+27.148462390 I0724 16:32:52.233605 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:52.233592821 +0000 UTC m=+27.189110147 I0724 16:32:52.273478 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0724 16:32:52.367175 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 16:32:52.367152071 +0000 UTC m=+27.322669387 I0724 16:32:52.381877 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:52.381907 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-24 16:32:52.381901989 +0000 UTC m=+27.337419315 I0724 16:32:52.381912 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 16:32:52.38190547 +0000 UTC m=+27.337422786 I0724 16:32:52.412314 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 16:32:52.412405 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0724 16:32:52.412426 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-24 16:32:52.412421515 +0000 UTC m=+27.367938841 I0724 16:32:52.631213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sx6js" condition "Approved" to 2026-07-24 16:32:52.63120438 +0000 UTC m=+27.586721696 I0724 16:32:52.694521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sx6js" condition "Ready" to 2026-07-24 16:32:52.694507585 +0000 UTC m=+27.650024911 I0724 16:32:52.768588 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:52.768574168 +0000 UTC m=+27.724091524 I0724 16:32:52.814699 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0724 16:32:53.021449 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 16:32:53.023922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-qrjmp" condition "Approved" to 2026-07-24 16:32:53.023913139 +0000 UTC m=+27.979430455 I0724 16:32:53.061927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-qrjmp" condition "Ready" to 2026-07-24 16:32:53.06191972 +0000 UTC m=+28.017437036 I0724 16:32:53.552010 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:53.551982542 +0000 UTC m=+28.507499868 I0724 16:32:53.696424 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 16:32:53.696702 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 16:32:53.696695753 +0000 UTC m=+28.652213079 I0724 16:32:53.958821 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 16:32:53.997415 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0724 16:32:54.094592 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0724 16:34:06.636877 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0724 16:34:06.671182 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-24 16:34:06.671154252 +0000 UTC m=+101.626671578 I0724 16:34:06.692867 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-24 16:34:06.692854381 +0000 UTC m=+101.648371697 E0724 16:34:09.451679 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0724 16:34:09.491175 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-24 16:34:09.491149779 +0000 UTC m=+104.446667105 I0724 16:34:09.516143 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-24 16:34:09.516121379 +0000 UTC m=+104.471638695 E0724 16:34:11.598771 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0724 16:34:11.646732 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-24 16:34:11.646718349 +0000 UTC m=+106.602235675 I0724 16:34:11.674880 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-24 16:34:11.674858059 +0000 UTC m=+106.630375385 E0724 16:34:13.557749 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0724 16:34:13.618391 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-24 16:34:13.61837237 +0000 UTC m=+108.573889696 I0724 16:34:13.643050 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-24 16:34:13.643030116 +0000 UTC m=+108.598547472