I0727 18:06:02.005636 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0727 18:06:02.005877 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0727 18:06:02.005925 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0727 18:06:02.006020 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0727 18:06:02.007715 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0727 18:06:02.008209 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0727 18:06:02.008443 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0727 18:06:02.008891 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0727 18:06:02.025250 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0727 18:06:02.026547 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0727 18:06:02.026905 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0727 18:06:02.028013 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0727 18:06:02.029512 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0727 18:06:02.032635 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0727 18:06:02.033646 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0727 18:06:02.034654 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0727 18:06:02.035148 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0727 18:06:02.035266 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0727 18:06:02.036010 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0727 18:06:02.036677 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0727 18:06:02.037253 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0727 18:06:02.040004 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0727 18:06:02.040488 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0727 18:06:02.040731 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0727 18:06:02.041944 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0727 18:06:02.042499 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0727 18:06:02.042532 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0727 18:06:02.043047 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0727 18:06:02.043071 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0727 18:06:02.043165 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0727 18:06:02.043684 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0727 18:06:02.044287 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0727 18:06:02.044817 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0727 18:06:32.330293 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-27 18:06:32.330246236 +0000 UTC m=+30.365050546 I0727 18:06:32.353575 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-27 18:06:32.353563322 +0000 UTC m=+30.388367642 I0727 18:06:32.353730 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:32.353748 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-27 18:06:32.353742735 +0000 UTC m=+30.388547075 I0727 18:06:32.374814 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0727 18:06:32.374924 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:32.374949 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-27 18:06:32.374943277 +0000 UTC m=+30.409747587 E0727 18:06:32.393248 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" E0727 18:06:32.399663 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c637be364ab6b4", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"69767728-ce0d-4354-8c14-bec11c0755f0", APIVersion:"cert-manager.io/v1", ResourceVersion:"1385", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 27, 18, 6, 32, 393160372, time.Local), LastTimestamp:time.Date(2026, time.July, 27, 18, 6, 32, 393160372, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c637be364ab6b4" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0727 18:06:32.456516 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-27 18:06:32.456490484 +0000 UTC m=+30.491294794 I0727 18:06:32.489957 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:32.490009 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-27 18:06:32.489995919 +0000 UTC m=+30.524800229 I0727 18:06:32.490015 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-27 18:06:32.490005149 +0000 UTC m=+30.524809459 I0727 18:06:32.521953 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:32.522064 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:32.522091 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-27 18:06:32.522082711 +0000 UTC m=+30.556887051 E0727 18:06:32.686089 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0727 18:06:32.775471 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:32.799532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dghd6" condition "Approved" to 2026-07-27 18:06:32.799514187 +0000 UTC m=+30.834318527 I0727 18:06:32.891413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dghd6" condition "Ready" to 2026-07-27 18:06:32.891399737 +0000 UTC m=+30.926204037 I0727 18:06:32.979046 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:32.97903158 +0000 UTC m=+31.013835870 I0727 18:06:33.023416 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:33.023729 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:33.023723028 +0000 UTC m=+31.058527328 I0727 18:06:33.036580 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:33.043095 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:33.044183 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0727 18:06:33.044184 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:33.044176655 +0000 UTC m=+31.078980955 I0727 18:06:33.346824 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-27 18:06:33.346659748 +0000 UTC m=+31.381464088 I0727 18:06:33.374523 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-27 18:06:33.374506701 +0000 UTC m=+31.409311011 I0727 18:06:33.374626 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:33.374730 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-27 18:06:33.374721214 +0000 UTC m=+31.409525514 I0727 18:06:33.419819 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0727 18:06:33.419977 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:33.420000 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-27 18:06:33.419995059 +0000 UTC m=+31.454799359 I0727 18:06:33.727324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qm7k2" condition "Approved" to 2026-07-27 18:06:33.727309627 +0000 UTC m=+31.762113937 I0727 18:06:33.769981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qm7k2" condition "Ready" to 2026-07-27 18:06:33.769969401 +0000 UTC m=+31.804773701 I0727 18:06:33.827442 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:33.827426184 +0000 UTC m=+31.862230494 I0727 18:06:33.839117 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-27 18:06:33.839101046 +0000 UTC m=+31.873905366 I0727 18:06:33.854041 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0727 18:06:33.854307 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:33.854270041 +0000 UTC m=+31.889074331 I0727 18:06:33.861311 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:33.861472 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-27 18:06:33.861462283 +0000 UTC m=+31.896266593 I0727 18:06:33.861518 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-27 18:06:33.861503654 +0000 UTC m=+31.896307954 I0727 18:06:33.863734 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0727 18:06:33.876125 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0727 18:06:33.913726 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0727 18:06:33.913810 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-27 18:06:33.913803397 +0000 UTC m=+31.948607707 I0727 18:06:34.126757 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0727 18:06:34.224145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9crnb" condition "Approved" to 2026-07-27 18:06:34.224129418 +0000 UTC m=+32.258933718 I0727 18:06:34.295862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9crnb" condition "Ready" to 2026-07-27 18:06:34.295844945 +0000 UTC m=+32.330649245 I0727 18:06:34.394907 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-27 18:06:34.394895924 +0000 UTC m=+32.429700224 I0727 18:06:34.398810 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:34.398803775 +0000 UTC m=+32.433608065 I0727 18:06:34.416857 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0727 18:06:34.416886 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-27 18:06:34.416879194 +0000 UTC m=+32.451683494 I0727 18:06:34.417109 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-27 18:06:34.417104067 +0000 UTC m=+32.451908367 I0727 18:06:34.430058 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0727 18:06:34.431531 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:34.43152268 +0000 UTC m=+32.466326980 I0727 18:06:34.591440 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0727 18:06:34.591534 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-27 18:06:34.591528699 +0000 UTC m=+32.626332999 I0727 18:06:34.712853 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0727 18:06:34.740978 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0727 18:06:35.075400 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0727 18:06:35.145237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6lv7h" condition "Approved" to 2026-07-27 18:06:35.145219152 +0000 UTC m=+33.180023482 I0727 18:06:35.521621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6lv7h" condition "Ready" to 2026-07-27 18:06:35.521609581 +0000 UTC m=+33.556413881 I0727 18:06:35.747027 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-27 18:06:35.747008135 +0000 UTC m=+33.781812465 I0727 18:06:35.848028 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0727 18:07:42.250592 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0727 18:07:42.306629 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-27 18:07:42.306614631 +0000 UTC m=+100.341418941 I0727 18:07:42.332447 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-27 18:07:42.332393438 +0000 UTC m=+100.367197778 E0727 18:07:44.802168 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0727 18:07:44.838438 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-27 18:07:44.838424238 +0000 UTC m=+102.873228568 I0727 18:07:44.861376 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-27 18:07:44.861365844 +0000 UTC m=+102.896170184 E0727 18:07:46.830580 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0727 18:07:46.891275 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-27 18:07:46.891246892 +0000 UTC m=+104.926051222 I0727 18:07:46.916462 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-27 18:07:46.91644113 +0000 UTC m=+104.951245450 E0727 18:07:48.741736 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0727 18:07:48.786514 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-27 18:07:48.786497242 +0000 UTC m=+106.821301552 I0727 18:07:48.814330 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-27 18:07:48.814313146 +0000 UTC m=+106.849117476