I0331 20:46:23.762586 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0331 20:46:23.762924 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0331 20:46:23.763016 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0331 20:46:23.763143 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 20:46:23.764731 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0331 20:46:23.765229 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0331 20:46:23.765454 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0331 20:46:23.766883 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 20:46:23.782446 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0331 20:46:23.783420 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0331 20:46:23.783579 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0331 20:46:23.784095 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0331 20:46:23.784463 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0331 20:46:23.784825 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0331 20:46:23.785385 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0331 20:46:23.785628 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0331 20:46:23.785954 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0331 20:46:23.786422 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0331 20:46:23.786996 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0331 20:46:23.787016 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0331 20:46:23.787106 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0331 20:46:23.787565 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0331 20:46:23.787925 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0331 20:46:23.788271 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0331 20:46:23.788547 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0331 20:46:23.788975 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0331 20:46:23.789361 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0331 20:46:23.789380 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0331 20:46:23.789401 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0331 20:46:23.789843 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0331 20:46:23.790519 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0331 20:46:23.790549 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0331 20:46:23.792434 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0331 20:46:42.058976 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-31 20:46:42.058929015 +0000 UTC m=+18.329579183 I0331 20:46:42.075083 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-31 20:46:42.075070636 +0000 UTC m=+18.345720784 I0331 20:46:42.075462 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:42.075494 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-31 20:46:42.07548766 +0000 UTC m=+18.346137808 E0331 20:46:42.089944 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18a20800aa47ece8", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"cd29b06d-e188-4ccf-adbb-03ba7eac21d4", APIVersion:"cert-manager.io/v1", ResourceVersion:"1169", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.March, 31, 20, 46, 42, 87259368, time.Local), LastTimestamp:time.Date(2026, time.March, 31, 20, 46, 42, 87259368, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18a20800aa47ece8" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) E0331 20:46:42.091310 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0331 20:46:42.093275 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0331 20:46:42.093327 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-31 20:46:42.093318744 +0000 UTC m=+18.363968892 E0331 20:46:42.103491 1 controller.go:167] cert-manager/certificates-readiness "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert" I0331 20:46:42.120279 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-31 20:46:42.120267658 +0000 UTC m=+18.390917796 I0331 20:46:42.130884 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 20:46:42.130875167 +0000 UTC m=+18.401525305 I0331 20:46:42.130967 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:42.131028 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-31 20:46:42.13102025 +0000 UTC m=+18.401670388 I0331 20:46:42.153812 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 20:46:42.154251 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:42.154319 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-31 20:46:42.154314 +0000 UTC m=+18.424964148 I0331 20:46:42.347687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8p946" condition "Approved" to 2026-03-31 20:46:42.347677186 +0000 UTC m=+18.618327324 I0331 20:46:42.397248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8p946" condition "Ready" to 2026-03-31 20:46:42.397239543 +0000 UTC m=+18.667889671 I0331 20:46:42.440778 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:42.440767948 +0000 UTC m=+18.711418096 I0331 20:46:42.471185 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0331 20:46:42.472012 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:42.472002361 +0000 UTC m=+18.742652529 I0331 20:46:42.507886 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" E0331 20:46:42.607060 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0331 20:46:42.697671 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-31 20:46:42.69765484 +0000 UTC m=+18.968304988 I0331 20:46:42.714296 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 20:46:42.714282812 +0000 UTC m=+18.984932970 I0331 20:46:42.714895 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:42.714921 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-31 20:46:42.714917517 +0000 UTC m=+18.985567665 I0331 20:46:42.734405 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 20:46:42.734500 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 20:46:42.734492443 +0000 UTC m=+19.005142591 I0331 20:46:43.014621 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-31 20:46:43.014606914 +0000 UTC m=+19.285257052 I0331 20:46:43.024349 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 20:46:43.024324649 +0000 UTC m=+19.294974787 I0331 20:46:43.025656 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:43.025677 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-31 20:46:43.025671342 +0000 UTC m=+19.296321470 I0331 20:46:43.044925 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 20:46:43.045011 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 20:46:43.045004119 +0000 UTC m=+19.315654257 I0331 20:46:43.054510 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 20:46:43.089387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-l7bx8" condition "Approved" to 2026-03-31 20:46:43.089374792 +0000 UTC m=+19.360024940 I0331 20:46:43.123244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-l7bx8" condition "Ready" to 2026-03-31 20:46:43.123232191 +0000 UTC m=+19.393882339 I0331 20:46:43.171584 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:43.171568088 +0000 UTC m=+19.442218226 I0331 20:46:43.198913 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 20:46:43.199482 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:43.19947512 +0000 UTC m=+19.470125258 I0331 20:46:43.223089 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0331 20:46:43.394087 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-31 20:46:43.394074579 +0000 UTC m=+19.664724717 I0331 20:46:43.409786 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 20:46:43.409776183 +0000 UTC m=+19.680426321 I0331 20:46:43.409880 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0331 20:46:43.409893 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-31 20:46:43.409891443 +0000 UTC m=+19.680541581 I0331 20:46:43.427976 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 20:46:43.428068 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 20:46:43.428059914 +0000 UTC m=+19.698710062 I0331 20:46:43.468505 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 20:46:43.503611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sxstb" condition "Approved" to 2026-03-31 20:46:43.503599187 +0000 UTC m=+19.774249315 I0331 20:46:43.544646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sxstb" condition "Ready" to 2026-03-31 20:46:43.544632966 +0000 UTC m=+19.815283104 I0331 20:46:43.980913 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:43.980899712 +0000 UTC m=+20.251549850 I0331 20:46:44.020354 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 20:46:44.129748 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:44.129734432 +0000 UTC m=+20.400384580 I0331 20:46:44.170179 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 20:46:44.268265 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 20:46:44.375908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hhnwn" condition "Approved" to 2026-03-31 20:46:44.375898442 +0000 UTC m=+20.646548570 I0331 20:46:44.787809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hhnwn" condition "Ready" to 2026-03-31 20:46:44.787796726 +0000 UTC m=+21.058446874 I0331 20:46:45.180443 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:45.180431076 +0000 UTC m=+21.451081214 I0331 20:46:45.218846 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0331 20:46:45.321515 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0331 20:46:45.321916 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:46:45.321907101 +0000 UTC m=+21.592557269 I0331 20:46:45.519550 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0331 20:47:59.476005 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0331 20:47:59.505797 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-31 20:47:59.505783267 +0000 UTC m=+95.776433415 I0331 20:47:59.524495 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 20:47:59.524486909 +0000 UTC m=+95.795137057 E0331 20:48:01.491308 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0331 20:48:01.522794 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-31 20:48:01.52277232 +0000 UTC m=+97.793422468 I0331 20:48:01.543906 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 20:48:01.543886276 +0000 UTC m=+97.814536434 E0331 20:48:03.101825 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0331 20:48:03.152724 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-31 20:48:03.152699629 +0000 UTC m=+99.423349807 I0331 20:48:03.173577 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 20:48:03.173560554 +0000 UTC m=+99.444210702 E0331 20:48:04.796328 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0331 20:48:04.823968 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-31 20:48:04.823955666 +0000 UTC m=+101.094605834 I0331 20:48:04.840652 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 20:48:04.840642278 +0000 UTC m=+101.111292416