I0317 20:46:29.495427 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0317 20:46:29.495666 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0317 20:46:29.495755 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0317 20:46:29.495929 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0317 20:46:29.497914 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0317 20:46:29.498351 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0317 20:46:29.498614 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0317 20:46:29.498879 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0317 20:46:29.512599 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0317 20:46:29.516645 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0317 20:46:29.518736 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0317 20:46:29.519426 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0317 20:46:29.520153 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0317 20:46:29.520187 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0317 20:46:29.520224 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0317 20:46:29.520981 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0317 20:46:29.521720 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0317 20:46:29.522235 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0317 20:46:29.523081 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0317 20:46:29.523401 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0317 20:46:29.523806 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0317 20:46:29.523831 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0317 20:46:29.523843 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0317 20:46:29.524319 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0317 20:46:29.524402 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0317 20:46:29.525158 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0317 20:46:29.525909 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0317 20:46:29.526462 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0317 20:46:29.527019 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0317 20:46:29.527471 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0317 20:46:29.527756 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0317 20:46:29.528037 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0317 20:46:29.529205 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0317 20:46:52.237251 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-17 20:46:52.237201774 +0000 UTC m=+22.786640633 I0317 20:46:52.253507 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-17 20:46:52.253493444 +0000 UTC m=+22.802932273 I0317 20:46:52.253970 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:52.254011 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-17 20:46:52.254001757 +0000 UTC m=+22.803440616 I0317 20:46:52.271667 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0317 20:46:52.271977 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:52.272007 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-17 20:46:52.271999421 +0000 UTC m=+22.821438250 E0317 20:46:52.276260 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0317 20:46:52.287281 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.189dbbe317cc9ea9", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"ff190bfe-a2a5-4f46-82ad-c4d1761b4c04", APIVersion:"cert-manager.io/v1", ResourceVersion:"1001", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.March, 17, 20, 46, 52, 285099689, time.Local), LastTimestamp:time.Date(2026, time.March, 17, 20, 46, 52, 285099689, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.189dbbe317cc9ea9" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0317 20:46:52.315705 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-17 20:46:52.315689927 +0000 UTC m=+22.865128756 I0317 20:46:52.334349 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:52.334405 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-17 20:46:52.334395429 +0000 UTC m=+22.883834258 I0317 20:46:52.334451 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-17 20:46:52.33442886 +0000 UTC m=+22.883867719 I0317 20:46:52.354661 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0317 20:46:52.354762 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-17 20:46:52.354753574 +0000 UTC m=+22.904192403 E0317 20:46:52.650232 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0317 20:46:52.868590 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0317 20:46:52.919348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8s6g2" condition "Approved" to 2026-03-17 20:46:52.919323033 +0000 UTC m=+23.468761912 I0317 20:46:53.000999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8s6g2" condition "Ready" to 2026-03-17 20:46:53.000985508 +0000 UTC m=+23.550424327 I0317 20:46:53.084199 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:53.084185538 +0000 UTC m=+23.633624357 I0317 20:46:53.155979 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0317 20:46:53.156549 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:53.156538095 +0000 UTC m=+23.705976914 I0317 20:46:53.195938 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0317 20:46:53.197258 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0317 20:46:53.197597 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:53.197588801 +0000 UTC m=+23.747027620 I0317 20:46:53.349521 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-17 20:46:53.349504213 +0000 UTC m=+23.898943032 I0317 20:46:53.371602 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-17 20:46:53.371587803 +0000 UTC m=+23.921026622 I0317 20:46:53.372065 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:53.372081 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-17 20:46:53.372078085 +0000 UTC m=+23.921516894 I0317 20:46:53.398780 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0317 20:46:53.398963 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-17 20:46:53.39895496 +0000 UTC m=+23.948393789 I0317 20:46:53.726539 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-17 20:46:53.726525538 +0000 UTC m=+24.275964357 I0317 20:46:53.748807 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:53.748847 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-17 20:46:53.748838551 +0000 UTC m=+24.298277370 I0317 20:46:53.748870 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-17 20:46:53.748852242 +0000 UTC m=+24.298291081 I0317 20:46:53.765521 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0317 20:46:53.765593 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:53.765623 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-17 20:46:53.765616141 +0000 UTC m=+24.315054960 I0317 20:46:54.066898 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-17 20:46:54.066877018 +0000 UTC m=+24.616315867 I0317 20:46:54.087222 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0317 20:46:54.087309 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-17 20:46:54.087303512 +0000 UTC m=+24.636742331 I0317 20:46:54.090296 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-17 20:46:54.090290481 +0000 UTC m=+24.639729300 I0317 20:46:54.101620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lz252" condition "Approved" to 2026-03-17 20:46:54.101606493 +0000 UTC m=+24.651045312 I0317 20:46:54.108158 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0317 20:46:54.108202 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-17 20:46:54.108198379 +0000 UTC m=+24.657637188 I0317 20:46:54.138632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lz252" condition "Ready" to 2026-03-17 20:46:54.13861723 +0000 UTC m=+24.688056049 I0317 20:46:54.185179 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:54.18515921 +0000 UTC m=+24.734598059 I0317 20:46:54.266142 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0317 20:46:54.266429 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:54.266423476 +0000 UTC m=+24.815862295 I0317 20:46:54.310769 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0317 20:46:54.807087 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0317 20:46:55.290554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s9n28" condition "Approved" to 2026-03-17 20:46:55.290530156 +0000 UTC m=+25.839969015 I0317 20:46:55.330810 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0317 20:46:55.527321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-s9n28" condition "Ready" to 2026-03-17 20:46:55.527302538 +0000 UTC m=+26.076741357 I0317 20:46:55.926406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6d44n" condition "Approved" to 2026-03-17 20:46:55.926392497 +0000 UTC m=+26.475831336 I0317 20:46:56.115875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6d44n" condition "Ready" to 2026-03-17 20:46:56.115862075 +0000 UTC m=+26.665300904 I0317 20:46:56.119463 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:56.119452165 +0000 UTC m=+26.668890994 I0317 20:46:56.203801 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0317 20:46:56.381983 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 20:46:56.381956134 +0000 UTC m=+26.931395003 I0317 20:46:56.580158 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0317 20:48:18.387455 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0317 20:48:18.567237 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-17 20:48:18.567214837 +0000 UTC m=+109.116653696 I0317 20:48:18.594255 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-17 20:48:18.594246004 +0000 UTC m=+109.143684833 E0317 20:48:22.711320 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0317 20:48:22.760690 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-17 20:48:22.760667378 +0000 UTC m=+113.310106237 I0317 20:48:22.783666 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-17 20:48:22.783651916 +0000 UTC m=+113.333090735 E0317 20:48:24.379725 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0317 20:48:24.413719 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-17 20:48:24.413705974 +0000 UTC m=+114.963144793 I0317 20:48:24.437614 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-17 20:48:24.4376004 +0000 UTC m=+114.987039229 E0317 20:48:25.912344 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0317 20:48:25.959142 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-17 20:48:25.959128153 +0000 UTC m=+116.508566972 I0317 20:48:25.981349 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-17 20:48:25.981336881 +0000 UTC m=+116.530775710