I0814 09:20:30.339014 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0814 09:20:30.339303 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0814 09:20:30.339495 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0814 09:20:30.339600 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0814 09:20:30.341307 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0814 09:20:30.341776 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0814 09:20:30.342060 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0814 09:20:30.342413 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0814 09:20:30.356301 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0814 09:20:30.357527 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0814 09:20:30.359991 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0814 09:20:30.360149 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0814 09:20:30.360296 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0814 09:20:30.360962 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0814 09:20:30.361280 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0814 09:20:30.365372 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0814 09:20:30.365545 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0814 09:20:30.365559 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0814 09:20:30.367294 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0814 09:20:30.368470 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0814 09:20:30.369280 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0814 09:20:30.369308 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0814 09:20:30.371391 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0814 09:20:30.372333 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0814 09:20:30.372839 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0814 09:20:30.373636 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0814 09:20:30.373685 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0814 09:20:30.373707 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0814 09:20:30.374372 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0814 09:20:30.375003 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0814 09:20:30.375538 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0814 09:20:30.377470 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0814 09:20:30.379604 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0814 09:21:05.453443 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-14 09:21:05.453409861 +0000 UTC m=+35.156474146 I0814 09:21:05.476255 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-14 09:21:05.476245034 +0000 UTC m=+35.179309289 I0814 09:21:05.476474 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:05.476510 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-14 09:21:05.476504508 +0000 UTC m=+35.179568763 E0814 09:21:05.511872 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18cba18400bee27f", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"ae5299fe-fe8f-48c4-8f90-7620049d868a", APIVersion:"cert-manager.io/v1", ResourceVersion:"1396", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.August, 14, 9, 21, 5, 502798463, time.Local), LastTimestamp:time.Date(2026, time.August, 14, 9, 21, 5, 502798463, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18cba18400bee27f" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0814 09:21:05.512364 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0814 09:21:05.512440 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-14 09:21:05.512432883 +0000 UTC m=+35.215497138 E0814 09:21:05.633742 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" E0814 09:21:05.641618 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0814 09:21:05.774222 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-14 09:21:05.774208148 +0000 UTC m=+35.477272443 I0814 09:21:05.802042 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:05.802090 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-14 09:21:05.802080306 +0000 UTC m=+35.505144641 I0814 09:21:05.802149 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-14 09:21:05.802140096 +0000 UTC m=+35.505204421 E0814 09:21:05.812352 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0814 09:21:05.825416 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0814 09:21:05.825513 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:05.825536 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-14 09:21:05.825530388 +0000 UTC m=+35.528594653 I0814 09:21:06.276378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8f8kl" condition "Approved" to 2026-08-14 09:21:06.276351135 +0000 UTC m=+35.979415480 I0814 09:21:06.311817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-8f8kl" condition "Ready" to 2026-08-14 09:21:06.311808451 +0000 UTC m=+36.014872706 I0814 09:21:06.375857 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:06.375837191 +0000 UTC m=+36.078901456 I0814 09:21:06.399677 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0814 09:21:06.403538 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:06.403517723 +0000 UTC m=+36.106581978 I0814 09:21:06.476491 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0814 09:21:06.487347 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0814 09:21:07.470670 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-14 09:21:07.470652918 +0000 UTC m=+37.173717183 I0814 09:21:07.505256 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:07.505266 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-14 09:21:07.505245869 +0000 UTC m=+37.208310154 I0814 09:21:07.505302 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-14 09:21:07.50529377 +0000 UTC m=+37.208358055 I0814 09:21:07.525200 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0814 09:21:07.525441 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:07.525515 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-14 09:21:07.525507172 +0000 UTC m=+37.228571437 I0814 09:21:08.033140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8fhqd" condition "Approved" to 2026-08-14 09:21:08.033131216 +0000 UTC m=+37.736195471 I0814 09:21:08.071368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8fhqd" condition "Ready" to 2026-08-14 09:21:08.071358047 +0000 UTC m=+37.774422302 I0814 09:21:08.108588 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:08.108575513 +0000 UTC m=+37.811639768 I0814 09:21:08.129302 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0814 09:21:08.199810 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0814 09:21:08.224738 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-14 09:21:08.224724945 +0000 UTC m=+37.927789210 I0814 09:21:08.262840 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:08.262879 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-14 09:21:08.262869745 +0000 UTC m=+37.965934040 I0814 09:21:08.264187 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-14 09:21:08.264178644 +0000 UTC m=+37.967242939 I0814 09:21:08.286198 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0814 09:21:08.286290 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-14 09:21:08.286282322 +0000 UTC m=+37.989346597 I0814 09:21:08.606438 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0814 09:21:08.689359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c899c" condition "Approved" to 2026-08-14 09:21:08.689345448 +0000 UTC m=+38.392409713 I0814 09:21:08.715242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c899c" condition "Ready" to 2026-08-14 09:21:08.715228021 +0000 UTC m=+38.418292296 I0814 09:21:08.771364 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:08.771354999 +0000 UTC m=+38.474419264 I0814 09:21:08.805433 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0814 09:21:08.847872 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-14 09:21:08.847860501 +0000 UTC m=+38.550924756 I0814 09:21:08.877299 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0814 09:21:08.877465 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-14 09:21:08.877457917 +0000 UTC m=+38.580522172 I0814 09:21:08.877390 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-14 09:21:08.877376226 +0000 UTC m=+38.580440511 I0814 09:21:08.901804 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0814 09:21:08.901873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-14 09:21:08.901868289 +0000 UTC m=+38.604932544 I0814 09:21:09.682716 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0814 09:21:09.726343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-fbrpb" condition "Approved" to 2026-08-14 09:21:09.726330727 +0000 UTC m=+39.429394992 I0814 09:21:09.802879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-fbrpb" condition "Ready" to 2026-08-14 09:21:09.802866934 +0000 UTC m=+39.505931189 I0814 09:21:09.904614 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:09.904604032 +0000 UTC m=+39.607668287 I0814 09:21:09.960851 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0814 09:21:09.961140 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:21:09.961134482 +0000 UTC m=+39.664198737 I0814 09:21:10.023294 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0814 09:21:10.032393 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" E0814 09:22:17.555699 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0814 09:22:17.601954 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-14 09:22:17.601918771 +0000 UTC m=+107.304983056 I0814 09:22:17.622110 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-14 09:22:17.622096995 +0000 UTC m=+107.325161260 E0814 09:22:20.087162 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0814 09:22:20.136476 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-14 09:22:20.136462439 +0000 UTC m=+109.839526694 I0814 09:22:20.161168 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-14 09:22:20.161107333 +0000 UTC m=+109.864171608 E0814 09:22:22.245533 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0814 09:22:22.284353 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-14 09:22:22.284314839 +0000 UTC m=+111.987379104 I0814 09:22:22.304937 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-14 09:22:22.304926015 +0000 UTC m=+112.007990280 E0814 09:22:24.064327 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0814 09:22:24.118693 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-14 09:22:24.118677917 +0000 UTC m=+113.821742192 I0814 09:22:24.140246 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-14 09:22:24.140232894 +0000 UTC m=+113.843297159