I0706 16:50:20.216324 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0706 16:50:20.216631 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0706 16:50:20.216712 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0706 16:50:20.216901 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0706 16:50:20.218492 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0706 16:50:20.218823 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0706 16:50:20.219041 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0706 16:50:20.219345 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0706 16:50:20.233722 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0706 16:50:20.237250 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0706 16:50:20.237265 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0706 16:50:20.239918 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0706 16:50:20.240121 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0706 16:50:20.240929 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0706 16:50:20.241737 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0706 16:50:20.242361 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0706 16:50:20.242606 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0706 16:50:20.242644 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0706 16:50:20.242690 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0706 16:50:20.243405 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0706 16:50:20.243865 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0706 16:50:20.244925 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0706 16:50:20.245034 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0706 16:50:20.245505 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0706 16:50:20.245817 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0706 16:50:20.246167 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0706 16:50:20.246796 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0706 16:50:20.247070 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0706 16:50:20.247123 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0706 16:50:20.247144 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0706 16:50:20.249135 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0706 16:50:20.249325 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0706 16:50:20.250722 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0706 16:50:51.060153 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-06 16:50:51.060096687 +0000 UTC m=+30.892964282 I0706 16:50:51.083382 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:51.083350 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-06 16:50:51.083338147 +0000 UTC m=+30.916205742 I0706 16:50:51.083409 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-06 16:50:51.083402898 +0000 UTC m=+30.916270493 I0706 16:50:51.103111 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0706 16:50:51.103183 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:51.103201 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-06 16:50:51.103197353 +0000 UTC m=+30.936064938 E0706 16:50:51.121243 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18bfc16cf1bd594c", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"59996d1e-b372-44a0-b9ff-c841c801b0c1", APIVersion:"cert-manager.io/v1", ResourceVersion:"1453", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 6, 16, 50, 51, 118352716, time.Local), LastTimestamp:time.Date(2026, time.July, 6, 16, 50, 51, 118352716, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18bfc16cf1bd594c" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) E0706 16:50:51.123243 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0706 16:50:51.166220 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-06 16:50:51.166211376 +0000 UTC m=+30.999078961 I0706 16:50:51.191196 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-06 16:50:51.191186354 +0000 UTC m=+31.024053959 I0706 16:50:51.191677 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:51.191735 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-06 16:50:51.191728476 +0000 UTC m=+31.024596061 I0706 16:50:51.248246 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 16:50:51.248602 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:51.248628 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-06 16:50:51.248621975 +0000 UTC m=+31.081489560 E0706 16:50:51.455475 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0706 16:50:51.542804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6xh5x" condition "Approved" to 2026-07-06 16:50:51.542793961 +0000 UTC m=+31.375661566 I0706 16:50:51.581175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6xh5x" condition "Ready" to 2026-07-06 16:50:51.581164823 +0000 UTC m=+31.414032418 I0706 16:50:51.614908 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:51.614897853 +0000 UTC m=+31.447765438 I0706 16:50:51.643596 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 16:50:51.721470 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0706 16:50:52.070592 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-06 16:50:52.070582881 +0000 UTC m=+31.903450476 I0706 16:50:52.102147 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-06 16:50:52.102118807 +0000 UTC m=+31.934986402 I0706 16:50:52.104258 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:52.104351 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-06 16:50:52.104344206 +0000 UTC m=+31.937211801 I0706 16:50:52.124369 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0706 16:50:52.124442 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:52.124467 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-06 16:50:52.124461994 +0000 UTC m=+31.957329599 I0706 16:50:52.493566 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-06 16:50:52.493555668 +0000 UTC m=+32.326423253 I0706 16:50:52.511413 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:52.511455 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-06 16:50:52.511435736 +0000 UTC m=+32.344303321 I0706 16:50:52.511683 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-06 16:50:52.511666541 +0000 UTC m=+32.344534166 I0706 16:50:52.530615 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 16:50:52.530674 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:52.530691 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-06 16:50:52.530687056 +0000 UTC m=+32.363554651 I0706 16:50:52.601364 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0706 16:50:52.617697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-64clf" condition "Approved" to 2026-07-06 16:50:52.617670339 +0000 UTC m=+32.450537924 I0706 16:50:52.673171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-64clf" condition "Ready" to 2026-07-06 16:50:52.673157117 +0000 UTC m=+32.506024732 I0706 16:50:52.784592 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:52.784579242 +0000 UTC m=+32.617446837 I0706 16:50:52.798044 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 16:50:52.808602 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0706 16:50:52.826038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zrgkc" condition "Approved" to 2026-07-06 16:50:52.826027334 +0000 UTC m=+32.658894929 I0706 16:50:52.873972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zrgkc" condition "Ready" to 2026-07-06 16:50:52.873963038 +0000 UTC m=+32.706830623 I0706 16:50:53.439623 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-06 16:50:53.439586241 +0000 UTC m=+33.272453836 I0706 16:50:53.458186 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:53.458174523 +0000 UTC m=+33.291042108 I0706 16:50:53.470372 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-06 16:50:53.470358096 +0000 UTC m=+33.303225711 I0706 16:50:53.470812 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:53.471704 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-06 16:50:53.470822217 +0000 UTC m=+33.303689822 I0706 16:50:53.486492 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 16:50:53.486774 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:53.48676872 +0000 UTC m=+33.319636305 I0706 16:50:53.504140 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0706 16:50:53.504388 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 16:50:53.512229 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0706 16:50:53.515386 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0706 16:50:53.515423 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-06 16:50:53.515416089 +0000 UTC m=+33.348283664 I0706 16:50:53.897692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sl9p8" condition "Approved" to 2026-07-06 16:50:53.897682122 +0000 UTC m=+33.730549707 I0706 16:50:53.956238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-sl9p8" condition "Ready" to 2026-07-06 16:50:53.956226905 +0000 UTC m=+33.789094490 I0706 16:50:54.225489 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:54.225475899 +0000 UTC m=+34.058343524 I0706 16:50:54.320189 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0706 16:50:54.320469 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 16:50:54.320462803 +0000 UTC m=+34.153330388 I0706 16:50:54.519679 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0706 16:52:45.977170 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0706 16:52:46.040915 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-06 16:52:46.040876964 +0000 UTC m=+145.873744579 I0706 16:52:46.061805 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-06 16:52:46.061791391 +0000 UTC m=+145.894658976 E0706 16:52:48.252235 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0706 16:52:48.292603 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-06 16:52:48.29259261 +0000 UTC m=+148.125460195 I0706 16:52:48.311210 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-06 16:52:48.311195868 +0000 UTC m=+148.144063473 E0706 16:52:50.210747 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0706 16:52:50.242936 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-06 16:52:50.242923596 +0000 UTC m=+150.075791191 I0706 16:52:50.260100 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-06 16:52:50.260089385 +0000 UTC m=+150.092956970 E0706 16:52:52.542444 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0706 16:52:52.580707 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-06 16:52:52.58069346 +0000 UTC m=+152.413561055 I0706 16:52:52.599986 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-06 16:52:52.599975954 +0000 UTC m=+152.432843549