I0325 08:58:13.184031       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0325 08:58:13.184145       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0325 08:58:13.184178       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0325 08:58:13.184230       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0325 08:58:13.185446       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0325 08:58:13.185758       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0325 08:58:13.185858       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0325 08:58:13.186093       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0325 08:58:13.226098       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0325 08:58:13.226242       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0325 08:58:13.226257       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0325 08:58:13.227241       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0325 08:58:13.227931       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0325 08:58:13.228383       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0325 08:58:13.228857       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0325 08:58:13.229394       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0325 08:58:13.229415       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0325 08:58:13.229508       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0325 08:58:13.230008       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0325 08:58:13.230304       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0325 08:58:13.230825       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0325 08:58:13.233633       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0325 08:58:13.235082       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0325 08:58:13.235238       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0325 08:58:13.235986       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0325 08:58:13.236800       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0325 08:58:13.237373       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0325 08:58:13.238069       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0325 08:58:13.238551       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0325 08:58:13.239073       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0325 08:58:13.239444       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0325 08:58:13.239693       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0325 08:58:13.239743       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0325 08:58:33.376830       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-25 08:58:33.376798925 +0000 UTC m=+20.231099736
I0325 08:58:33.389423       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-25 08:58:33.389413013 +0000 UTC m=+20.243713794
I0325 08:58:33.389562       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:33.389581       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-25 08:58:33.389575209 +0000 UTC m=+20.243875980
I0325 08:58:33.406008       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert"
I0325 08:58:33.406298       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:33.406316       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-25 08:58:33.406310972 +0000 UTC m=+20.260611753
E0325 08:58:33.407918       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
E0325 08:58:33.416923       1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert"
I0325 08:58:33.437891       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-25 08:58:33.43788161 +0000 UTC m=+20.292182391
I0325 08:58:33.454914       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-25 08:58:33.454904343 +0000 UTC m=+20.309205134
I0325 08:58:33.455221       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:33.455237       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-25 08:58:33.455234065 +0000 UTC m=+20.309534846
I0325 08:58:33.469845       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0325 08:58:33.469906       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:33.469922       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-25 08:58:33.469917336 +0000 UTC m=+20.324218127
I0325 08:58:34.059448       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-25 08:58:34.059436015 +0000 UTC m=+20.913736786
I0325 08:58:34.076586       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:34.076616       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-25 08:58:34.076608837 +0000 UTC m=+20.930909618
I0325 08:58:34.076916       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-25 08:58:34.076906168 +0000 UTC m=+20.931206939
I0325 08:58:34.097359       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0325 08:58:34.097431       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:34.097448       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-25 08:58:34.097442949 +0000 UTC m=+20.951743730
I0325 08:58:34.313582       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vr274" condition "Approved" to 2026-03-25 08:58:34.313571868 +0000 UTC m=+21.167872659
I0325 08:58:34.403253       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-25 08:58:34.403241703 +0000 UTC m=+21.257542474
I0325 08:58:34.403576       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0325 08:58:34.413337       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6fk5j" condition "Approved" to 2026-03-25 08:58:34.413330666 +0000 UTC m=+21.267631437
I0325 08:58:34.417571       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vr274" condition "Ready" to 2026-03-25 08:58:34.417564775 +0000 UTC m=+21.271865546
I0325 08:58:34.422357       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:34.422649       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-25 08:58:34.422368104 +0000 UTC m=+21.276668875
I0325 08:58:34.422532       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-25 08:58:34.422388025 +0000 UTC m=+21.276688796
I0325 08:58:34.438683       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6fk5j" condition "Ready" to 2026-03-25 08:58:34.438673605 +0000 UTC m=+21.292974376
I0325 08:58:34.441538       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0325 08:58:34.443444       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-25 08:58:34.443409141 +0000 UTC m=+21.297709922
I0325 08:58:34.455509       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 08:58:34.455498275 +0000 UTC m=+21.309799056
I0325 08:58:34.475783       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 08:58:34.475775057 +0000 UTC m=+21.330075828
I0325 08:58:34.478557       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0325 08:58:34.501225       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0325 08:58:34.501411       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 08:58:34.501407646 +0000 UTC m=+21.355708407
I0325 08:58:34.541192       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0325 08:58:34.542171       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0325 08:58:34.730242       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-25 08:58:34.73023036 +0000 UTC m=+21.584531131
I0325 08:58:34.747075       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-25 08:58:34.747066722 +0000 UTC m=+21.601367493
I0325 08:58:34.747146       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:34.747169       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-25 08:58:34.747163955 +0000 UTC m=+21.601464726
I0325 08:58:34.763619       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0325 08:58:34.763681       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0325 08:58:34.763696       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-25 08:58:34.763691504 +0000 UTC m=+21.617992275
I0325 08:58:34.835431       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0325 08:58:34.874129       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ck6n9" condition "Approved" to 2026-03-25 08:58:34.874117057 +0000 UTC m=+21.728417858
I0325 08:58:35.095574       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ck6n9" condition "Ready" to 2026-03-25 08:58:35.09556076 +0000 UTC m=+21.949861541
I0325 08:58:35.469332       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 08:58:35.469319704 +0000 UTC m=+22.323620485
I0325 08:58:35.672353       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0325 08:58:35.723595       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xkw2p" condition "Approved" to 2026-03-25 08:58:35.72357215 +0000 UTC m=+22.577872931
I0325 08:58:36.168882       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xkw2p" condition "Ready" to 2026-03-25 08:58:36.168874699 +0000 UTC m=+23.023175470
I0325 08:58:36.522768       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 08:58:36.522754708 +0000 UTC m=+23.377055479
I0325 08:58:36.673952       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0325 08:58:36.967781       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
E0325 08:59:45.488451       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0325 08:59:45.563400       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-25 08:59:45.563386213 +0000 UTC m=+92.417687024
I0325 08:59:45.606753       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-25 08:59:45.606736263 +0000 UTC m=+92.461037074
E0325 08:59:48.230784       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0325 08:59:48.331448       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-25 08:59:48.331428392 +0000 UTC m=+95.185729203
I0325 08:59:48.356763       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-25 08:59:48.35675115 +0000 UTC m=+95.211051931
E0325 08:59:50.531534       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0325 08:59:50.588910       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-25 08:59:50.588892705 +0000 UTC m=+97.443193506
I0325 08:59:50.617273       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-25 08:59:50.617258955 +0000 UTC m=+97.471559736
E0325 08:59:53.195119       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0325 08:59:53.346034       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-25 08:59:53.346017414 +0000 UTC m=+100.200318215
I0325 08:59:53.413196       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-25 08:59:53.413170192 +0000 UTC m=+100.267470993