I0822 08:35:42.052691       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0822 08:35:42.052882       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0822 08:35:42.052942       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0822 08:35:42.053045       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0822 08:35:42.055784       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0822 08:35:42.057258       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0822 08:35:42.057342       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0822 08:35:42.058254       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0822 08:35:42.071099       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0822 08:35:42.072713       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0822 08:35:42.072788       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0822 08:35:42.072986       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0822 08:35:42.073775       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0822 08:35:42.073795       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0822 08:35:42.073858       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0822 08:35:42.073916       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0822 08:35:42.074585       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0822 08:35:42.074859       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0822 08:35:42.075161       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0822 08:35:42.075510       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0822 08:35:42.075533       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0822 08:35:42.075546       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0822 08:35:42.075691       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0822 08:35:42.076209       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0822 08:35:42.076760       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0822 08:35:42.077256       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0822 08:35:42.077706       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0822 08:35:42.078056       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0822 08:35:42.078531       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0822 08:35:42.078931       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0822 08:35:42.079261       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0822 08:35:42.080767       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0822 08:35:42.082980       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0822 08:36:06.248274       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-22 08:36:06.248230653 +0000 UTC m=+24.230018144
I0822 08:36:06.267808       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 08:36:06.267799241 +0000 UTC m=+24.249586722
I0822 08:36:06.267996       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:06.268030       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-22 08:36:06.268023439 +0000 UTC m=+24.249810930
I0822 08:36:06.283992       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert"
I0822 08:36:06.284051       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-22 08:36:06.284045365 +0000 UTC m=+24.265832856
E0822 08:36:06.294734       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
I0822 08:36:06.337846       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 08:36:06.33783717 +0000 UTC m=+24.319624661
I0822 08:36:06.356336       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 08:36:06.356329612 +0000 UTC m=+24.338117103
I0822 08:36:06.357242       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:06.357263       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 08:36:06.357258124 +0000 UTC m=+24.339045615
I0822 08:36:06.376134       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0822 08:36:06.376213       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:06.376241       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-22 08:36:06.376235132 +0000 UTC m=+24.358022653
I0822 08:36:06.508188       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0822 08:36:06.520940       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f6j26" condition "Approved" to 2026-08-22 08:36:06.520931969 +0000 UTC m=+24.502719450
I0822 08:36:06.549716       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f6j26" condition "Ready" to 2026-08-22 08:36:06.549706507 +0000 UTC m=+24.531493998
I0822 08:36:06.611119       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:06.611111126 +0000 UTC m=+24.592898607
I0822 08:36:06.679093       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0822 08:36:06.679329       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:06.679324341 +0000 UTC m=+24.661111822
I0822 08:36:06.697983       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0822 08:36:06.698148       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:06.698142134 +0000 UTC m=+24.679929605
E0822 08:36:06.827008       1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert"
I0822 08:36:07.032180       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 08:36:07.032165248 +0000 UTC m=+25.013952769
I0822 08:36:07.069529       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:07.069555       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-22 08:36:07.069550294 +0000 UTC m=+25.051337775
I0822 08:36:07.069820       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:36:07.069817603 +0000 UTC m=+25.051605084
I0822 08:36:07.092490       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0822 08:36:07.092574       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:36:07.092569374 +0000 UTC m=+25.074356855
I0822 08:36:07.417752       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0822 08:36:07.444316       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 08:36:07.44430728 +0000 UTC m=+25.426094751
I0822 08:36:07.448012       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2s7p4" condition "Approved" to 2026-08-22 08:36:07.44800347 +0000 UTC m=+25.429790951
I0822 08:36:07.463928       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:07.463951       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-22 08:36:07.463946671 +0000 UTC m=+25.445734152
I0822 08:36:07.464078       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 08:36:07.464073595 +0000 UTC m=+25.445861076
I0822 08:36:07.474535       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2s7p4" condition "Ready" to 2026-08-22 08:36:07.474523433 +0000 UTC m=+25.456310924
I0822 08:36:07.481672       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0822 08:36:07.482960       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 08:36:07.48295221 +0000 UTC m=+25.464739701
I0822 08:36:07.525025       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:07.5250145 +0000 UTC m=+25.506801981
I0822 08:36:07.554057       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0822 08:36:07.554240       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:07.554233907 +0000 UTC m=+25.536021378
I0822 08:36:07.584507       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0822 08:36:07.869553       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 08:36:07.869515661 +0000 UTC m=+25.851303142
I0822 08:36:07.888946       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 08:36:07.888934065 +0000 UTC m=+25.870721566
I0822 08:36:07.888972       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:07.889053       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 08:36:07.889044079 +0000 UTC m=+25.870831580
I0822 08:36:07.910945       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0822 08:36:07.910992       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0822 08:36:07.911015       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-22 08:36:07.911011822 +0000 UTC m=+25.892799303
I0822 08:36:08.139412       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q8c9h" condition "Approved" to 2026-08-22 08:36:08.139402894 +0000 UTC m=+26.121190385
I0822 08:36:08.181176       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q8c9h" condition "Ready" to 2026-08-22 08:36:08.181165704 +0000 UTC m=+26.162953186
I0822 08:36:08.231586       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:08.231574434 +0000 UTC m=+26.213361925
I0822 08:36:08.261328       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0822 08:36:08.607765       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0822 08:36:08.770216       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fsvpg" condition "Approved" to 2026-08-22 08:36:08.770203677 +0000 UTC m=+26.751991158
I0822 08:36:08.822432       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fsvpg" condition "Ready" to 2026-08-22 08:36:08.822423711 +0000 UTC m=+26.804211192
I0822 08:36:09.310896       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 08:36:09.310880754 +0000 UTC m=+27.292668275
I0822 08:36:09.409551       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
E0822 08:37:09.371373       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0822 08:37:09.416564       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-22 08:37:09.416528377 +0000 UTC m=+87.398315869
I0822 08:37:09.433051       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-22 08:37:09.43303964 +0000 UTC m=+87.414827131
E0822 08:37:11.654018       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0822 08:37:11.699095       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-22 08:37:11.699082009 +0000 UTC m=+89.680869500
I0822 08:37:11.720467       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-22 08:37:11.720454519 +0000 UTC m=+89.702242030
E0822 08:37:13.483107       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0822 08:37:13.537365       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-22 08:37:13.537350065 +0000 UTC m=+91.519137576
I0822 08:37:13.564562       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-22 08:37:13.564547718 +0000 UTC m=+91.546335199
E0822 08:37:15.303163       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0822 08:37:15.349622       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-22 08:37:15.349604576 +0000 UTC m=+93.331392057
I0822 08:37:15.373384       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-22 08:37:15.373365685 +0000 UTC m=+93.355153196