I0617 19:01:32.495677 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0617 19:01:32.495907 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0617 19:01:32.495981 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0617 19:01:32.496068 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0617 19:01:32.497682 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0617 19:01:32.498014 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0617 19:01:32.498256 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0617 19:01:32.498479 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0617 19:01:32.515734 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0617 19:01:32.516675 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0617 19:01:32.517300 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0617 19:01:32.518545 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0617 19:01:32.521146 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0617 19:01:32.521273 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0617 19:01:32.522616 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0617 19:01:32.523258 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0617 19:01:32.523706 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0617 19:01:32.523729 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0617 19:01:32.523742 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0617 19:01:32.523825 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0617 19:01:32.524359 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0617 19:01:32.524768 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0617 19:01:32.524841 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0617 19:01:32.525312 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0617 19:01:32.525625 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0617 19:01:32.526002 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0617 19:01:32.526392 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0617 19:01:32.526697 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0617 19:01:32.526870 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0617 19:01:32.527010 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0617 19:01:32.527329 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0617 19:01:32.527561 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0617 19:01:32.528209 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0617 19:02:09.174413 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-17 19:02:09.174390468 +0000 UTC m=+36.725750535 I0617 19:02:09.194851 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:09.194896 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-17 19:02:09.194886749 +0000 UTC m=+36.746246826 I0617 19:02:09.194919 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-17 19:02:09.194886639 +0000 UTC m=+36.746246716 E0617 19:02:09.211738 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18b9f3906b9db331", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"c0b3fbf4-4c21-4a75-bedc-b56fa6aba8a4", APIVersion:"cert-manager.io/v1", ResourceVersion:"1413", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.June, 17, 19, 2, 9, 208079153, time.Local), LastTimestamp:time.Date(2026, time.June, 17, 19, 2, 9, 208079153, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18b9f3906b9db331" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0617 19:02:09.214745 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0617 19:02:09.214803 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-17 19:02:09.214795138 +0000 UTC m=+36.766155215 E0617 19:02:09.227107 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0617 19:02:09.289407 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-17 19:02:09.289390184 +0000 UTC m=+36.840750261 I0617 19:02:09.313205 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:09.313260 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 19:02:09.313255308 +0000 UTC m=+36.864615385 I0617 19:02:09.313415 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-17 19:02:09.313402001 +0000 UTC m=+36.864762078 I0617 19:02:09.339216 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 19:02:09.339267 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:09.339286 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 19:02:09.339281188 +0000 UTC m=+36.890641265 E0617 19:02:09.395817 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0617 19:02:09.519549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f5566" condition "Approved" to 2026-06-17 19:02:09.51953679 +0000 UTC m=+37.070896857 I0617 19:02:09.589690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f5566" condition "Ready" to 2026-06-17 19:02:09.58968001 +0000 UTC m=+37.141040077 I0617 19:02:09.661778 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:09.661768302 +0000 UTC m=+37.213128369 I0617 19:02:09.698577 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 19:02:09.779240 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0617 19:02:10.143452 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-17 19:02:10.143254171 +0000 UTC m=+37.694614228 I0617 19:02:10.165113 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:10.165171 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 19:02:10.165155009 +0000 UTC m=+37.716515116 I0617 19:02:10.165147 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-17 19:02:10.165140188 +0000 UTC m=+37.716500255 I0617 19:02:10.183739 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 19:02:10.183876 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 19:02:10.183871548 +0000 UTC m=+37.735231615 I0617 19:02:10.341515 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 19:02:10.404968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bc7qn" condition "Approved" to 2026-06-17 19:02:10.404955033 +0000 UTC m=+37.956315100 I0617 19:02:10.541975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bc7qn" condition "Ready" to 2026-06-17 19:02:10.491817926 +0000 UTC m=+38.043177993 I0617 19:02:10.571206 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-17 19:02:10.571193409 +0000 UTC m=+38.122553466 I0617 19:02:10.595028 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:10.595054 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-17 19:02:10.595047697 +0000 UTC m=+38.146407764 I0617 19:02:10.595856 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 19:02:10.595831624 +0000 UTC m=+38.147191681 I0617 19:02:10.602065 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:10.602054407 +0000 UTC m=+38.153414474 I0617 19:02:10.614503 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 19:02:10.614578 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 19:02:10.614573284 +0000 UTC m=+38.165933351 I0617 19:02:10.625884 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0617 19:02:10.863386 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 19:02:10.932962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-clf82" condition "Approved" to 2026-06-17 19:02:10.932948574 +0000 UTC m=+38.484308641 I0617 19:02:10.997627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-clf82" condition "Ready" to 2026-06-17 19:02:10.997617203 +0000 UTC m=+38.548977270 I0617 19:02:11.024233 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-17 19:02:11.024215227 +0000 UTC m=+38.575575304 I0617 19:02:11.037358 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:11.037348455 +0000 UTC m=+38.588708522 I0617 19:02:11.049094 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0617 19:02:11.049128 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-17 19:02:11.049122103 +0000 UTC m=+38.600482170 I0617 19:02:11.049256 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 19:02:11.049232905 +0000 UTC m=+38.600592992 I0617 19:02:11.068105 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 19:02:11.068419 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:11.068410391 +0000 UTC m=+38.619770498 I0617 19:02:11.090437 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 19:02:11.090485 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 19:02:11.090481238 +0000 UTC m=+38.641841305 I0617 19:02:11.455177 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 19:02:11.495674 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0617 19:02:11.743420 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 19:02:11.791491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rj4f6" condition "Approved" to 2026-06-17 19:02:11.791478477 +0000 UTC m=+39.342838554 I0617 19:02:12.057557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rj4f6" condition "Ready" to 2026-06-17 19:02:12.057523527 +0000 UTC m=+39.608883604 I0617 19:02:12.337795 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:12.337782483 +0000 UTC m=+39.889142560 I0617 19:02:12.589850 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 19:02:12.590142 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 19:02:12.590135464 +0000 UTC m=+40.141495531 I0617 19:02:12.715016 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0617 19:02:12.784102 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0617 19:03:29.686064 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0617 19:03:29.718443 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-17 19:03:29.718407888 +0000 UTC m=+117.269767965 I0617 19:03:29.734781 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-17 19:03:29.734745107 +0000 UTC m=+117.286105194 E0617 19:03:32.146663 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0617 19:03:32.191715 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-17 19:03:32.191705071 +0000 UTC m=+119.743065138 I0617 19:03:32.213184 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 19:03:32.213172658 +0000 UTC m=+119.764532735 E0617 19:03:33.928352 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0617 19:03:34.006507 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-17 19:03:34.006487264 +0000 UTC m=+121.557847471 I0617 19:03:34.027751 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 19:03:34.027739216 +0000 UTC m=+121.579099293 E0617 19:03:36.045170 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0617 19:03:36.081493 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-17 19:03:36.081480243 +0000 UTC m=+123.632840320 I0617 19:03:36.102575 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 19:03:36.102562871 +0000 UTC m=+123.653922948