I0706 14:15:44.048526 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0706 14:15:44.048837 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0706 14:15:44.048999 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0706 14:15:44.049173 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0706 14:15:44.051209 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0706 14:15:44.051897 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0706 14:15:44.052072 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0706 14:15:44.053178 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0706 14:15:44.073292 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0706 14:15:44.073628 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0706 14:15:44.075474 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0706 14:15:44.075974 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0706 14:15:44.078341 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0706 14:15:44.078365 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0706 14:15:44.078440 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0706 14:15:44.081078 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0706 14:15:44.081696 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0706 14:15:44.081747 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0706 14:15:44.083149 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0706 14:15:44.083975 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0706 14:15:44.084967 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0706 14:15:44.085634 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0706 14:15:44.085973 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0706 14:15:44.086453 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0706 14:15:44.086678 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0706 14:15:44.086816 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0706 14:15:44.087304 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0706 14:15:44.087688 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0706 14:15:44.087942 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0706 14:15:44.088292 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0706 14:15:44.088544 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0706 14:15:44.092468 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0706 14:15:44.093313 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0706 14:16:16.441385 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-06 14:16:16.441338533 +0000 UTC m=+32.434641372 I0706 14:16:16.466428 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:16.466513 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-06 14:16:16.466503164 +0000 UTC m=+32.459805983 I0706 14:16:16.467596 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-06 14:16:16.467589883 +0000 UTC m=+32.460892702 I0706 14:16:16.487326 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0706 14:16:16.487438 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-06 14:16:16.487429998 +0000 UTC m=+32.480732817 E0706 14:16:16.490435 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0706 14:16:16.492177 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18bfb8fd86ca312f", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"0e0bcff3-2dee-4a1b-9b9d-6c287e3f0167", APIVersion:"cert-manager.io/v1", ResourceVersion:"1385", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 6, 14, 16, 16, 489640239, time.Local), LastTimestamp:time.Date(2026, time.July, 6, 14, 16, 16, 489640239, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18bfb8fd86ca312f" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0706 14:16:16.537296 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-06 14:16:16.537283147 +0000 UTC m=+32.530585966 I0706 14:16:16.556618 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:16.556646 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-06 14:16:16.556641779 +0000 UTC m=+32.549944598 I0706 14:16:16.556932 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-06 14:16:16.556928237 +0000 UTC m=+32.550231066 I0706 14:16:16.575208 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:16.575419 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-06 14:16:16.575395044 +0000 UTC m=+32.568697853 E0706 14:16:16.762245 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0706 14:16:16.947829 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:17.023935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-bn4rx" condition "Approved" to 2026-07-06 14:16:17.02391852 +0000 UTC m=+33.017221329 I0706 14:16:17.064430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-bn4rx" condition "Ready" to 2026-07-06 14:16:17.0644063 +0000 UTC m=+33.057709149 I0706 14:16:17.119529 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:17.11951458 +0000 UTC m=+33.112817389 I0706 14:16:17.163233 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:17.163602 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:17.163592998 +0000 UTC m=+33.156895817 I0706 14:16:17.164427 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:17.186238 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:17.186503 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:17.186497406 +0000 UTC m=+33.179800215 I0706 14:16:17.193698 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 14:16:17.507990 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-06 14:16:17.507972127 +0000 UTC m=+33.501274926 I0706 14:16:17.546581 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-06 14:16:17.546564355 +0000 UTC m=+33.539867194 I0706 14:16:17.546916 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:17.546946 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-06 14:16:17.546938655 +0000 UTC m=+33.540241474 I0706 14:16:17.569743 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0706 14:16:17.569843 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:17.569873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-06 14:16:17.569866564 +0000 UTC m=+33.563169383 I0706 14:16:17.871127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qnx22" condition "Approved" to 2026-07-06 14:16:17.87111093 +0000 UTC m=+33.864413739 I0706 14:16:17.921109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qnx22" condition "Ready" to 2026-07-06 14:16:17.92109566 +0000 UTC m=+33.914398469 I0706 14:16:17.967925 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:17.967911433 +0000 UTC m=+33.961214242 I0706 14:16:18.026814 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0706 14:16:18.056456 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-06 14:16:18.056438926 +0000 UTC m=+34.049741745 I0706 14:16:18.099103 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:18.099137 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-06 14:16:18.099129215 +0000 UTC m=+34.092432024 I0706 14:16:18.099471 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-06 14:16:18.099452673 +0000 UTC m=+34.092755482 I0706 14:16:18.122272 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 14:16:18.122326 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:18.122343 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-06 14:16:18.122337779 +0000 UTC m=+34.115640588 I0706 14:16:18.665539 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 14:16:18.668173 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-06 14:16:18.66815865 +0000 UTC m=+34.661461469 I0706 14:16:18.688801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vnhw6" condition "Approved" to 2026-07-06 14:16:18.688789684 +0000 UTC m=+34.682092523 I0706 14:16:18.732712 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 14:16:18.732757 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-06 14:16:18.732747447 +0000 UTC m=+34.726050266 I0706 14:16:18.732775 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-06 14:16:18.732757137 +0000 UTC m=+34.726059976 I0706 14:16:18.737841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vnhw6" condition "Ready" to 2026-07-06 14:16:18.737834686 +0000 UTC m=+34.731137505 I0706 14:16:18.769971 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0706 14:16:18.770427 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-06 14:16:18.770250113 +0000 UTC m=+34.763552922 I0706 14:16:18.793016 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:18.792994375 +0000 UTC m=+34.786297194 I0706 14:16:18.867751 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 14:16:18.930433 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0706 14:16:19.031096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rx9mb" condition "Approved" to 2026-07-06 14:16:19.031088117 +0000 UTC m=+35.024390926 I0706 14:16:19.200481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rx9mb" condition "Ready" to 2026-07-06 14:16:19.200472841 +0000 UTC m=+35.193775650 I0706 14:16:19.470886 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 14:16:19.707304 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 14:16:19.70729076 +0000 UTC m=+35.700593569 I0706 14:16:19.810455 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0706 14:17:32.698451 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0706 14:17:32.745098 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-06 14:17:32.745080172 +0000 UTC m=+108.738383011 I0706 14:17:32.772912 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-06 14:17:32.77290037 +0000 UTC m=+108.766203189 E0706 14:17:35.115054 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0706 14:17:35.155537 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-06 14:17:35.155515108 +0000 UTC m=+111.148817927 I0706 14:17:35.181781 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-06 14:17:35.181764174 +0000 UTC m=+111.175067023 E0706 14:17:37.023776 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0706 14:17:37.063962 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-06 14:17:37.063943514 +0000 UTC m=+113.057246323 I0706 14:17:37.085559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-06 14:17:37.085543025 +0000 UTC m=+113.078845844 E0706 14:17:38.975161 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0706 14:17:39.008895 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-06 14:17:39.008881819 +0000 UTC m=+115.002184638 I0706 14:17:39.031012 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-06 14:17:39.031000671 +0000 UTC m=+115.024303480