I0616 00:57:20.958786 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0616 00:57:20.959029 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0616 00:57:20.959091 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0616 00:57:20.959196 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0616 00:57:20.960880 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0616 00:57:20.961364 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0616 00:57:20.961536 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0616 00:57:20.967765 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0616 00:57:20.982305 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0616 00:57:20.982624 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0616 00:57:20.984902 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0616 00:57:20.985043 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0616 00:57:20.986295 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0616 00:57:20.986353 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0616 00:57:20.986404 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0616 00:57:20.987240 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0616 00:57:20.987871 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0616 00:57:20.988471 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0616 00:57:20.990720 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0616 00:57:20.991272 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0616 00:57:20.991975 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0616 00:57:20.991996 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0616 00:57:20.992023 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0616 00:57:20.992559 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0616 00:57:20.992900 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0616 00:57:20.993259 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0616 00:57:20.993624 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0616 00:57:20.993971 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0616 00:57:20.994353 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0616 00:57:20.994710 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0616 00:57:20.995532 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0616 00:57:20.995863 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0616 00:57:20.995931 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0616 00:57:48.217330 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-16 00:57:48.217306353 +0000 UTC m=+27.291528772 I0616 00:57:48.241007 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-16 00:57:48.24099576 +0000 UTC m=+27.315218179 I0616 00:57:48.241486 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:48.241531 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-16 00:57:48.241521244 +0000 UTC m=+27.315743703 I0616 00:57:48.258434 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0616 00:57:48.258491 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:48.258505 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-16 00:57:48.258500339 +0000 UTC m=+27.332722758 E0616 00:57:48.267241 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0616 00:57:48.271043 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18b969cfac1de28b", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"9d295d09-61ad-4c7c-bb4c-3e97a9c897c8", APIVersion:"cert-manager.io/v1", ResourceVersion:"1357", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.June, 16, 0, 57, 48, 268528267, time.Local), LastTimestamp:time.Date(2026, time.June, 16, 0, 57, 48, 268528267, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18b969cfac1de28b" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0616 00:57:48.326376 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-16 00:57:48.32636082 +0000 UTC m=+27.400583239 I0616 00:57:48.346196 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-16 00:57:48.346178958 +0000 UTC m=+27.420401377 I0616 00:57:48.346510 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:48.346523 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-16 00:57:48.346520317 +0000 UTC m=+27.420742736 I0616 00:57:48.361881 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0616 00:57:48.362115 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:48.362206 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-16 00:57:48.362200658 +0000 UTC m=+27.436423077 I0616 00:57:48.912251 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0616 00:57:48.922721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-w8r9n" condition "Approved" to 2026-06-16 00:57:48.922713253 +0000 UTC m=+27.996935662 I0616 00:57:48.965041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-w8r9n" condition "Ready" to 2026-06-16 00:57:48.964942967 +0000 UTC m=+28.039165376 I0616 00:57:49.009782 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:57:49.009773838 +0000 UTC m=+28.083996247 I0616 00:57:49.035993 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0616 00:57:49.087148 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-16 00:57:49.087138549 +0000 UTC m=+28.161360958 I0616 00:57:49.119183 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:49.119227 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-16 00:57:49.119220146 +0000 UTC m=+28.193442555 I0616 00:57:49.119379 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-16 00:57:49.11937581 +0000 UTC m=+28.193598219 I0616 00:57:49.166330 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0616 00:57:49.166303 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0616 00:57:49.166426 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:49.166455 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-16 00:57:49.166450711 +0000 UTC m=+28.240673120 E0616 00:57:49.198922 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0616 00:57:49.329733 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0616 00:57:49.332548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-crl5m" condition "Approved" to 2026-06-16 00:57:49.332539348 +0000 UTC m=+28.406761757 I0616 00:57:49.374731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-crl5m" condition "Ready" to 2026-06-16 00:57:49.374722165 +0000 UTC m=+28.448944574 I0616 00:57:49.476948 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:57:49.476940476 +0000 UTC m=+28.551162875 I0616 00:57:49.519287 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0616 00:57:49.540916 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-16 00:57:49.540902963 +0000 UTC m=+28.615125382 I0616 00:57:49.561290 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:49.561310 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-16 00:57:49.561305128 +0000 UTC m=+28.635527537 I0616 00:57:49.561589 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-16 00:57:49.561585756 +0000 UTC m=+28.635808165 I0616 00:57:49.585678 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0616 00:57:49.585810 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:49.585848 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-16 00:57:49.58584108 +0000 UTC m=+28.660063499 I0616 00:57:49.988882 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-16 00:57:49.988869988 +0000 UTC m=+29.063092407 I0616 00:57:50.008674 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0616 00:57:50.008699 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-16 00:57:50.008696959 +0000 UTC m=+29.082919378 I0616 00:57:50.008999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-pfzfd" condition "Approved" to 2026-06-16 00:57:50.008983506 +0000 UTC m=+29.083205915 I0616 00:57:50.008579 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-16 00:57:50.008569355 +0000 UTC m=+29.082791774 I0616 00:57:50.027462 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0616 00:57:50.027541 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-16 00:57:50.027535166 +0000 UTC m=+29.101757585 I0616 00:57:50.040660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-pfzfd" condition "Ready" to 2026-06-16 00:57:50.040642585 +0000 UTC m=+29.114865004 I0616 00:57:50.302969 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:57:50.302953555 +0000 UTC m=+29.377175964 I0616 00:57:50.444215 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0616 00:57:50.486848 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0616 00:57:50.740553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-qd9sb" condition "Approved" to 2026-06-16 00:57:50.740528257 +0000 UTC m=+29.814750706 I0616 00:57:51.101341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-qd9sb" condition "Ready" to 2026-06-16 00:57:51.101329184 +0000 UTC m=+30.175551603 I0616 00:57:51.483955 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0616 00:57:51.646323 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:57:51.646310758 +0000 UTC m=+30.720533177 I0616 00:57:51.732706 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0616 00:57:51.732945 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:57:51.732940076 +0000 UTC m=+30.807162475 I0616 00:57:51.981992 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0616 00:57:52.050344 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0616 00:58:57.728935 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0616 00:58:57.774678 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-16 00:58:57.77465785 +0000 UTC m=+96.848880269 I0616 00:58:57.800040 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-16 00:58:57.800029482 +0000 UTC m=+96.874251891 E0616 00:59:00.151638 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0616 00:59:00.187187 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-16 00:59:00.187171367 +0000 UTC m=+99.261393816 I0616 00:59:00.208039 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-16 00:59:00.208023446 +0000 UTC m=+99.282245895 E0616 00:59:01.948013 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0616 00:59:01.989483 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-16 00:59:01.98946443 +0000 UTC m=+101.063686829 I0616 00:59:02.026362 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-16 00:59:02.026349503 +0000 UTC m=+101.100571902 E0616 00:59:03.760518 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0616 00:59:03.801756 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-16 00:59:03.801741575 +0000 UTC m=+102.875963994 I0616 00:59:03.824110 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-16 00:59:03.824096751 +0000 UTC m=+102.898319180