I0326 14:49:49.518347 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0326 14:49:49.518540 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0326 14:49:49.532938 1 options.go:259] "enabling the sig-network Gateway API certificate-shim and HTTP-01 solver" logger="cert-manager" I0326 14:49:49.533023 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers gateway-shim ingress-shim issuers orders]" logger="cert-manager.controller" I0326 14:49:49.533054 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0326 14:49:49.533075 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0326 14:49:49.533819 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0326 14:49:49.533881 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0326 14:49:49.534021 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0326 14:49:49.540565 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0326 14:49:49.547655 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0326 14:49:49.555651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0326 14:49:49.560143 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0326 14:49:49.560253 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0326 14:49:49.564434 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0326 14:49:49.567468 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="gateway-shim" I0326 14:49:49.573197 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0326 14:49:49.577254 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0326 14:49:49.580929 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0326 14:49:49.584007 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0326 14:49:49.586543 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0326 14:49:49.590836 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0326 14:49:49.595313 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0326 14:49:49.599534 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0326 14:49:49.603939 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0326 14:49:49.607696 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0326 14:49:49.612830 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0326 14:49:49.612903 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0326 14:49:49.612924 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0326 14:49:49.612931 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0326 14:49:49.619611 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0326 14:49:49.623964 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0326 14:49:49.629671 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0326 14:49:49.637988 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0326 14:49:49.638092 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0326 14:49:49.641619 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.642685 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.643296 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.644223 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.645411 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.646038 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.646110 1 reflector.go:359] Caches populated for *v1.Gateway from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.646597 1 reflector.go:359] Caches populated for *v1.HTTPRoute from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.659470 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.674217 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.687287 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.703053 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:49:49.719947 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0326 14:50:42.665780 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-26 14:50:42.66575368 +0000 UTC m=+53.176846926 I0326 14:50:42.679646 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:42.679649 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-26 14:50:42.679632746 +0000 UTC m=+53.190726022 I0326 14:50:42.679690 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-26 14:50:42.679682217 +0000 UTC m=+53.190775463 I0326 14:50:42.690967 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:42.691970 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:42.692002 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-26 14:50:42.691991984 +0000 UTC m=+53.203085230 E0326 14:50:42.695233 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0326 14:50:42.724255 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-26 14:50:42.724243256 +0000 UTC m=+53.235336492 I0326 14:50:42.738724 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:42.738802 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-26 14:50:42.738792733 +0000 UTC m=+53.249885989 I0326 14:50:42.738769 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-26 14:50:42.738761432 +0000 UTC m=+53.249854678 I0326 14:50:42.749996 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:42.750269 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:42.750301 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-26 14:50:42.750292397 +0000 UTC m=+53.261385643 I0326 14:50:42.942693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-03-26 14:50:42.942671922 +0000 UTC m=+53.453765168 I0326 14:50:42.999060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-03-26 14:50:42.9990438 +0000 UTC m=+53.510137036 I0326 14:50:43.044565 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:43.0445555 +0000 UTC m=+53.555648746 I0326 14:50:43.066165 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.086946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" E0326 14:50:43.178282 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0326 14:50:43.261970 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-26 14:50:43.261959584 +0000 UTC m=+53.773052820 I0326 14:50:43.278619 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:43.278651 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-26 14:50:43.278645077 +0000 UTC m=+53.789738313 I0326 14:50:43.278687 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-26 14:50:43.278671788 +0000 UTC m=+53.789765034 I0326 14:50:43.306962 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.310630 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:43.310667 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-26 14:50:43.310660701 +0000 UTC m=+53.821753937 I0326 14:50:43.550390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.577757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-03-26 14:50:43.577747988 +0000 UTC m=+54.088841214 I0326 14:50:43.604581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-03-26 14:50:43.60455176 +0000 UTC m=+54.115645016 I0326 14:50:43.611873 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-26 14:50:43.611863048 +0000 UTC m=+54.122956284 I0326 14:50:43.630106 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:43.630095359 +0000 UTC m=+54.141188605 I0326 14:50:43.639368 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:43.640355 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-26 14:50:43.639417563 +0000 UTC m=+54.150510799 I0326 14:50:43.640318 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-26 14:50:43.640308189 +0000 UTC m=+54.151401435 I0326 14:50:43.652285 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.653239 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:43.653231996 +0000 UTC m=+54.164325232 I0326 14:50:43.667803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.668110 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-26 14:50:43.668069587 +0000 UTC m=+54.179162833 I0326 14:50:43.690680 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.802509 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:43.873466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-03-26 14:50:43.87345461 +0000 UTC m=+54.384547846 I0326 14:50:43.942644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-03-26 14:50:43.942629576 +0000 UTC m=+54.453722812 I0326 14:50:44.023035 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-26 14:50:44.023019918 +0000 UTC m=+54.534113154 I0326 14:50:44.035054 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:44.035088 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-26 14:50:44.035080468 +0000 UTC m=+54.546173714 I0326 14:50:44.035364 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-26 14:50:44.035356774 +0000 UTC m=+54.546450030 I0326 14:50:44.472731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:44.474047 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 14:50:44.474072 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-26 14:50:44.474066221 +0000 UTC m=+54.985159457 I0326 14:50:44.532620 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:44.532570144 +0000 UTC m=+55.043663400 I0326 14:50:44.674859 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:44.685158 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:44.685148201 +0000 UTC m=+55.196241437 I0326 14:50:44.990947 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:45.193723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-03-26 14:50:45.193710188 +0000 UTC m=+55.704803454 I0326 14:50:45.280352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-03-26 14:50:45.280342903 +0000 UTC m=+55.791436139 I0326 14:50:45.729122 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:45.729110308 +0000 UTC m=+56.240203554 I0326 14:50:45.874731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:45.875317 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 14:50:45.875308567 +0000 UTC m=+56.386401823 I0326 14:50:46.122336 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0326 14:50:46.171951 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" E0326 14:52:03.732143 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" logger="cert-manager.controller" I0326 14:52:03.773638 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-26 14:52:03.773604862 +0000 UTC m=+134.284698098 I0326 14:52:03.797447 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-26 14:52:03.79741146 +0000 UTC m=+134.308504686 E0326 14:52:05.895783 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" logger="cert-manager.controller" I0326 14:52:05.947160 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-26 14:52:05.947147702 +0000 UTC m=+136.458240938 I0326 14:52:05.973156 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-26 14:52:05.973142785 +0000 UTC m=+136.484236041 E0326 14:52:07.575461 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" logger="cert-manager.controller" I0326 14:52:07.611122 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-26 14:52:07.611092157 +0000 UTC m=+138.122185393 I0326 14:52:07.630092 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-26 14:52:07.630079102 +0000 UTC m=+138.141172348 E0326 14:52:09.261330 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" logger="cert-manager.controller" I0326 14:52:09.294308 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-26 14:52:09.294275611 +0000 UTC m=+139.805368847 I0326 14:52:09.312025 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-26 14:52:09.31200933 +0000 UTC m=+139.823102576