I0618 05:17:34.350805 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0618 05:17:34.351296 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0618 05:17:34.351519 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0618 05:17:34.351815 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 05:17:34.354553 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0618 05:17:34.355454 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0618 05:17:34.355787 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0618 05:17:34.357190 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 05:17:34.413703 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0618 05:17:34.415419 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0618 05:17:34.416345 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0618 05:17:34.416427 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0618 05:17:34.417524 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0618 05:17:34.417959 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0618 05:17:34.417986 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0618 05:17:34.418122 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0618 05:17:34.418700 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0618 05:17:34.419101 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0618 05:17:34.419695 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0618 05:17:34.420427 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0618 05:17:34.420803 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0618 05:17:34.421490 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0618 05:17:34.421918 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0618 05:17:34.422087 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0618 05:17:34.422288 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0618 05:17:34.423519 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0618 05:17:34.423822 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0618 05:17:34.423848 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0618 05:17:34.424203 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0618 05:17:34.424793 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0618 05:17:34.425452 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0618 05:17:34.426314 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0618 05:17:34.427507 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0618 05:18:03.002360 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-18 05:18:03.002336899 +0000 UTC m=+28.687735742 I0618 05:18:03.019777 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:03.019828 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-18 05:18:03.01981763 +0000 UTC m=+28.705216463 I0618 05:18:03.019812 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-18 05:18:03.019803969 +0000 UTC m=+28.705202832 E0618 05:18:03.037907 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18ba152c673f9426", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"a0128e63-296d-442a-88a0-fe0e13fd50c3", APIVersion:"cert-manager.io/v1", ResourceVersion:"1356", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.June, 18, 5, 18, 3, 33416742, time.Local), LastTimestamp:time.Date(2026, time.June, 18, 5, 18, 3, 33416742, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18ba152c673f9426" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0618 05:18:03.040953 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0618 05:18:03.041054 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-18 05:18:03.041048914 +0000 UTC m=+28.726447737 E0618 05:18:03.051379 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0618 05:18:03.091581 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-18 05:18:03.091567747 +0000 UTC m=+28.776966610 I0618 05:18:03.111156 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:03.111186 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-18 05:18:03.11118151 +0000 UTC m=+28.796580343 I0618 05:18:03.111255 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-18 05:18:03.11124016 +0000 UTC m=+28.796639003 I0618 05:18:03.128347 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0618 05:18:03.128416 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:03.128431 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-18 05:18:03.128426905 +0000 UTC m=+28.813825738 E0618 05:18:03.158889 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0618 05:18:03.301442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q8cjs" condition "Approved" to 2026-06-18 05:18:03.30143365 +0000 UTC m=+28.986832473 I0618 05:18:03.343603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-q8cjs" condition "Ready" to 2026-06-18 05:18:03.343439541 +0000 UTC m=+29.028838374 I0618 05:18:03.394008 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:03.393998474 +0000 UTC m=+29.079397297 I0618 05:18:03.414920 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0618 05:18:03.415068 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:03.415063685 +0000 UTC m=+29.100462508 I0618 05:18:03.455223 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0618 05:18:03.873422 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-18 05:18:03.873409695 +0000 UTC m=+29.558808528 I0618 05:18:03.896641 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-18 05:18:03.89663292 +0000 UTC m=+29.582031743 I0618 05:18:03.896717 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:03.896745 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-18 05:18:03.896738832 +0000 UTC m=+29.582137665 I0618 05:18:03.920346 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0618 05:18:03.920409 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-18 05:18:03.920403637 +0000 UTC m=+29.605802480 I0618 05:18:04.023092 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0618 05:18:04.089915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4mn74" condition "Approved" to 2026-06-18 05:18:04.08990055 +0000 UTC m=+29.775299403 I0618 05:18:04.160157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4mn74" condition "Ready" to 2026-06-18 05:18:04.160139956 +0000 UTC m=+29.845538769 I0618 05:18:04.236699 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:04.236688969 +0000 UTC m=+29.922087792 I0618 05:18:04.274979 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0618 05:18:04.275216 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:04.275212019 +0000 UTC m=+29.960610842 I0618 05:18:04.302592 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0618 05:18:04.302850 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:04.302843083 +0000 UTC m=+29.988241916 I0618 05:18:04.306308 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0618 05:18:04.306571 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-18 05:18:04.306558486 +0000 UTC m=+29.991957319 I0618 05:18:04.332639 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-18 05:18:04.332620068 +0000 UTC m=+30.018018901 I0618 05:18:04.333025 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:04.333046 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-18 05:18:04.333040307 +0000 UTC m=+30.018439120 I0618 05:18:04.354881 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0618 05:18:04.354956 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:04.354973 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-18 05:18:04.354968076 +0000 UTC m=+30.040366909 I0618 05:18:04.747799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-58z89" condition "Approved" to 2026-06-18 05:18:04.747787278 +0000 UTC m=+30.433186111 I0618 05:18:04.749026 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-18 05:18:04.749020094 +0000 UTC m=+30.434418927 I0618 05:18:04.774965 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-18 05:18:04.774950113 +0000 UTC m=+30.460348946 I0618 05:18:04.775190 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:04.775217 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-18 05:18:04.775209688 +0000 UTC m=+30.460608531 I0618 05:18:04.784170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-58z89" condition "Ready" to 2026-06-18 05:18:04.784153647 +0000 UTC m=+30.469552490 I0618 05:18:04.791308 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0618 05:18:04.791424 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0618 05:18:04.791461 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-18 05:18:04.791451623 +0000 UTC m=+30.476850496 I0618 05:18:04.918117 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:04.917641399 +0000 UTC m=+30.603040212 I0618 05:18:05.067162 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0618 05:18:05.069770 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:05.069762533 +0000 UTC m=+30.755161346 I0618 05:18:05.263434 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0618 05:18:05.518283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h78fn" condition "Approved" to 2026-06-18 05:18:05.518270896 +0000 UTC m=+31.203669759 I0618 05:18:05.774695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-h78fn" condition "Ready" to 2026-06-18 05:18:05.774685066 +0000 UTC m=+31.460083899 I0618 05:18:06.064731 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:06.064714908 +0000 UTC m=+31.750113771 I0618 05:18:06.216408 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0618 05:18:06.216647 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 05:18:06.216642196 +0000 UTC m=+31.902041019 I0618 05:18:06.420433 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0618 05:19:24.493396 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0618 05:19:24.532917 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-18 05:19:24.532903 +0000 UTC m=+110.218301823 I0618 05:19:24.566022 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-18 05:19:24.566006047 +0000 UTC m=+110.251404880 E0618 05:19:28.524896 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0618 05:19:28.569463 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-18 05:19:28.569398607 +0000 UTC m=+114.254797440 I0618 05:19:28.593727 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-18 05:19:28.593709542 +0000 UTC m=+114.279108405 E0618 05:19:30.563214 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0618 05:19:30.603961 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-18 05:19:30.603944083 +0000 UTC m=+116.289342906 I0618 05:19:30.626773 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-18 05:19:30.626757008 +0000 UTC m=+116.312155871 E0618 05:19:32.413075 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0618 05:19:32.462442 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-18 05:19:32.462423638 +0000 UTC m=+118.147822501 I0618 05:19:32.484619 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-18 05:19:32.484586219 +0000 UTC m=+118.169985052