I0830 01:02:23.781261 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0830 01:02:23.781407 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0830 01:02:23.781448 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0830 01:02:23.781562 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0830 01:02:23.782749 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0830 01:02:23.783100 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0830 01:02:23.783291 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0830 01:02:23.783941 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0830 01:02:23.799798 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0830 01:02:23.802532 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0830 01:02:23.803321 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0830 01:02:23.804149 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0830 01:02:23.807114 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0830 01:02:23.807398 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0830 01:02:23.807436 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0830 01:02:23.807801 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0830 01:02:23.809958 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0830 01:02:23.811886 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0830 01:02:23.812957 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0830 01:02:23.813609 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0830 01:02:23.814351 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0830 01:02:23.815115 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0830 01:02:23.815880 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0830 01:02:23.816599 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0830 01:02:23.817314 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0830 01:02:23.817352 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0830 01:02:23.818141 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0830 01:02:23.818577 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0830 01:02:23.818606 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0830 01:02:23.818624 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0830 01:02:23.818707 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0830 01:02:23.819415 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0830 01:02:23.820711 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0830 01:02:50.375712 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-30 01:02:50.375681176 +0000 UTC m=+26.636569267 I0830 01:02:50.401107 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-30 01:02:50.401096007 +0000 UTC m=+26.661984098 I0830 01:02:50.401339 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:50.401383 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-30 01:02:50.401371463 +0000 UTC m=+26.662259554 E0830 01:02:50.427465 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18d06f9c97b7f210", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"c68d0e48-85e9-4131-88a4-59e6ce075c1c", APIVersion:"cert-manager.io/v1", ResourceVersion:"1329", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 30, 1, 2, 50, 417082896, time.Local), LastTimestamp:time.Date(2026, time.August, 30, 1, 2, 50, 417082896, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18d06f9c97b7f210" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0830 01:02:50.432618 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0830 01:02:50.432708 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-30 01:02:50.432699947 +0000 UTC m=+26.693588048 E0830 01:02:50.442900 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0830 01:02:50.515141 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-30 01:02:50.515122622 +0000 UTC m=+26.776010713 I0830 01:02:50.539472 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:50.539525 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-30 01:02:50.539514483 +0000 UTC m=+26.800402584 I0830 01:02:50.539547 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-30 01:02:50.539410231 +0000 UTC m=+26.800298302 I0830 01:02:50.557862 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0830 01:02:50.557934 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:50.557959 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-30 01:02:50.55794974 +0000 UTC m=+26.818837811 E0830 01:02:50.587234 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0830 01:02:50.768753 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0830 01:02:50.781323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9svr9" condition "Approved" to 2026-08-30 01:02:50.781298568 +0000 UTC m=+27.042186629 I0830 01:02:50.819251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9svr9" condition "Ready" to 2026-08-30 01:02:50.8192395 +0000 UTC m=+27.080127561 I0830 01:02:50.849540 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:50.849528737 +0000 UTC m=+27.110416798 I0830 01:02:50.874522 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0830 01:02:50.947896 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0830 01:02:51.320845 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-30 01:02:51.320823309 +0000 UTC m=+27.581711380 I0830 01:02:51.337275 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-30 01:02:51.337259776 +0000 UTC m=+27.598147847 I0830 01:02:51.337455 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:51.337578 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-30 01:02:51.33747548 +0000 UTC m=+27.598363541 I0830 01:02:51.357394 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0830 01:02:51.357522 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:51.357545 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-30 01:02:51.357539278 +0000 UTC m=+27.618427339 I0830 01:02:51.560618 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0830 01:02:51.571159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q6vnx" condition "Approved" to 2026-08-30 01:02:51.571149741 +0000 UTC m=+27.832037802 I0830 01:02:51.629666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q6vnx" condition "Ready" to 2026-08-30 01:02:51.629656961 +0000 UTC m=+27.890545022 I0830 01:02:51.692586 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:51.692574535 +0000 UTC m=+27.953462586 I0830 01:02:51.732162 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0830 01:02:51.732387 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:51.732382934 +0000 UTC m=+27.993270995 I0830 01:02:51.756931 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-30 01:02:51.756920867 +0000 UTC m=+28.017808928 I0830 01:02:51.766766 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0830 01:02:51.772321 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-30 01:02:51.772272334 +0000 UTC m=+28.033160395 I0830 01:02:51.772557 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:51.772582 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-30 01:02:51.77257614 +0000 UTC m=+28.033464191 I0830 01:02:51.795199 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0830 01:02:51.795275 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:51.795408 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-30 01:02:51.795388871 +0000 UTC m=+28.056276932 I0830 01:02:52.194760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ccm5q" condition "Approved" to 2026-08-30 01:02:52.194739204 +0000 UTC m=+28.455627265 I0830 01:02:52.200201 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-30 01:02:52.20018862 +0000 UTC m=+28.461076681 I0830 01:02:52.215812 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-30 01:02:52.215800591 +0000 UTC m=+28.476688652 I0830 01:02:52.215911 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0830 01:02:52.215927 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-30 01:02:52.215923423 +0000 UTC m=+28.476811484 I0830 01:02:52.217259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ccm5q" condition "Ready" to 2026-08-30 01:02:52.217253079 +0000 UTC m=+28.478141140 I0830 01:02:52.231136 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0830 01:02:52.231182 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-30 01:02:52.231177597 +0000 UTC m=+28.492065658 I0830 01:02:52.303673 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:52.303657264 +0000 UTC m=+28.564545325 I0830 01:02:52.384710 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0830 01:02:52.384972 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:52.384967792 +0000 UTC m=+28.645855853 I0830 01:02:52.637206 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0830 01:02:52.685098 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0830 01:02:52.886541 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0830 01:02:52.998069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xhcmk" condition "Approved" to 2026-08-30 01:02:52.99805419 +0000 UTC m=+29.258942281 I0830 01:02:53.267318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xhcmk" condition "Ready" to 2026-08-30 01:02:53.267268012 +0000 UTC m=+29.528156103 I0830 01:02:53.591078 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:53.591068065 +0000 UTC m=+29.851956126 I0830 01:02:53.687087 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0830 01:02:53.687586 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-30 01:02:53.687579853 +0000 UTC m=+29.948467924 I0830 01:02:53.936358 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0830 01:02:54.043230 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0830 01:03:56.638215 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0830 01:03:56.690535 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-30 01:03:56.690516416 +0000 UTC m=+92.951404487 I0830 01:03:56.713210 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-30 01:03:56.71314881 +0000 UTC m=+92.974036901 E0830 01:03:59.292769 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0830 01:03:59.338999 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-30 01:03:59.338913162 +0000 UTC m=+95.599801253 I0830 01:03:59.366943 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-30 01:03:59.366930392 +0000 UTC m=+95.627818453 E0830 01:04:01.198114 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0830 01:04:01.236422 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-30 01:04:01.23640739 +0000 UTC m=+97.497295451 I0830 01:04:01.259593 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-30 01:04:01.259575372 +0000 UTC m=+97.520463443 E0830 01:04:03.201039 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0830 01:04:03.250998 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-30 01:04:03.250980017 +0000 UTC m=+99.511868108 I0830 01:04:03.283170 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-30 01:04:03.283156818 +0000 UTC m=+99.544044879