I0730 16:46:56.555939 1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]} I0730 16:46:56.556087 1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5" I0730 16:46:56.556137 1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"] W0730 16:46:56.556213 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0730 16:46:56.557346 1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0730 16:46:56.557658 1 controller.go:134] cert-manager/controller "msg"="starting leader election" I0730 16:46:56.557848 1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""} I0730 16:46:56.558035 1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller... I0730 16:46:56.572558 1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller I0730 16:46:56.575356 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca" I0730 16:46:56.575529 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned" I0730 16:46:56.578224 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers" I0730 16:46:56.579165 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca" I0730 16:46:56.579919 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim" I0730 16:46:56.580425 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness" I0730 16:46:56.580948 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager" I0730 16:46:56.581692 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault" I0730 16:46:56.581781 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger" I0730 16:46:56.582539 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim" I0730 16:46:56.582680 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers" I0730 16:46:56.583363 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme" I0730 16:46:56.583920 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver" I0730 16:46:56.584375 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi" I0730 16:46:56.584737 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme" I0730 16:46:56.584775 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager" I0730 16:46:56.585391 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges" I0730 16:46:56.585754 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault" I0730 16:46:56.586423 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing" I0730 16:46:56.586800 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics" I0730 16:46:56.587130 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned" I0730 16:46:56.587165 1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi" I0730 16:46:56.587266 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager" I0730 16:46:56.588001 1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders" I0730 16:47:23.348746 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-30 16:47:23.348719085 +0000 UTC m=+26.831747178 I0730 16:47:23.372863 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:23.372921 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-30 16:47:23.372909574 +0000 UTC m=+26.855937667 I0730 16:47:23.373116 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-30 16:47:23.373108626 +0000 UTC m=+26.856136719 E0730 16:47:23.390403 1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18c71f2a334750d1", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"57ea3daf-a084-4a13-bdeb-a784a307c4aa", APIVersion:"cert-manager.io/v1", ResourceVersion:"1365", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.July, 30, 16, 47, 23, 385090257, time.Local), LastTimestamp:time.Date(2026, time.July, 30, 16, 47, 23, 385090257, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18c71f2a334750d1" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0730 16:47:23.394479 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="cert-manager-test/selfsigned-cert" I0730 16:47:23.394622 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-30 16:47:23.394616655 +0000 UTC m=+26.877644738 E0730 16:47:23.405210 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" I0730 16:47:23.455145 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-30 16:47:23.452766703 +0000 UTC m=+26.935794796 I0730 16:47:23.470753 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:23.470790 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-30 16:47:23.470783324 +0000 UTC m=+26.953811427 I0730 16:47:23.471209 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-30 16:47:23.471204199 +0000 UTC m=+26.954232302 I0730 16:47:23.488581 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0730 16:47:23.488677 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-30 16:47:23.488669615 +0000 UTC m=+26.971697718 I0730 16:47:23.648569 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0730 16:47:23.743646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jxkpg" condition "Approved" to 2026-07-30 16:47:23.7436388 +0000 UTC m=+27.226666883 I0730 16:47:23.796275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jxkpg" condition "Ready" to 2026-07-30 16:47:23.796264342 +0000 UTC m=+27.279292435 I0730 16:47:23.834232 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:23.834221873 +0000 UTC m=+27.317249956 E0730 16:47:23.870986 1 controller.go:167] cert-manager/certificates-key-manager "msg"="re-queuing item due to error processing" "error"="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" "key"="cert-manager-test/selfsigned-cert" I0730 16:47:23.872934 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0730 16:47:23.873369 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:23.873364678 +0000 UTC m=+27.356392761 I0730 16:47:23.902015 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert" I0730 16:47:23.902541 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:23.902531938 +0000 UTC m=+27.385560031 I0730 16:47:24.254443 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-30 16:47:24.254427559 +0000 UTC m=+27.737455652 I0730 16:47:24.278450 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:24.278454 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-30 16:47:24.278434034 +0000 UTC m=+27.761462157 I0730 16:47:24.278498 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-30 16:47:24.278488718 +0000 UTC m=+27.761516841 I0730 16:47:24.302594 1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0730 16:47:24.302675 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:24.302691 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-30 16:47:24.302686266 +0000 UTC m=+27.785714369 I0730 16:47:24.661593 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-30 16:47:24.661584012 +0000 UTC m=+28.144612095 I0730 16:47:24.689419 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-30 16:47:24.689402952 +0000 UTC m=+28.172431045 I0730 16:47:24.690217 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:24.690256 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-30 16:47:24.690245985 +0000 UTC m=+28.173274068 I0730 16:47:24.700805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-z7vd2" condition "Approved" to 2026-07-30 16:47:24.70074104 +0000 UTC m=+28.183769163 I0730 16:47:24.705197 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0730 16:47:24.707975 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-30 16:47:24.707964804 +0000 UTC m=+28.190992897 I0730 16:47:24.728124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-z7vd2" condition "Ready" to 2026-07-30 16:47:24.728114853 +0000 UTC m=+28.211142936 I0730 16:47:24.776223 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:24.776211739 +0000 UTC m=+28.259239812 I0730 16:47:24.810419 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0730 16:47:24.927091 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" I0730 16:47:25.130587 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-30 16:47:25.130574252 +0000 UTC m=+28.613602345 I0730 16:47:25.153774 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-30 16:47:25.15376422 +0000 UTC m=+28.636792303 I0730 16:47:25.153852 1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist" I0730 16:47:25.153875 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-30 16:47:25.153870947 +0000 UTC m=+28.636899030 I0730 16:47:25.178156 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0730 16:47:25.178211 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-30 16:47:25.178206093 +0000 UTC m=+28.661234186 I0730 16:47:25.877143 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0730 16:47:25.903367 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0730 16:47:25.922712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j827n" condition "Approved" to 2026-07-30 16:47:25.922704135 +0000 UTC m=+29.405732218 I0730 16:47:25.947155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8kx7c" condition "Approved" to 2026-07-30 16:47:25.947144138 +0000 UTC m=+29.430172221 I0730 16:47:25.973143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8kx7c" condition "Ready" to 2026-07-30 16:47:25.973132224 +0000 UTC m=+29.456160307 I0730 16:47:25.980318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j827n" condition "Ready" to 2026-07-30 16:47:25.980302466 +0000 UTC m=+29.463330559 I0730 16:47:26.065198 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:26.065186079 +0000 UTC m=+29.548214182 I0730 16:47:26.126514 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:26.126501453 +0000 UTC m=+29.609529536 I0730 16:47:26.243501 1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert" I0730 16:47:26.315628 1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0730 16:47:26.316064 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 16:47:26.316055225 +0000 UTC m=+29.799083348 I0730 16:47:26.615329 1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" E0730 16:48:43.770260 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" I0730 16:48:43.802301 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-30 16:48:43.802274004 +0000 UTC m=+107.285302097 I0730 16:48:43.824090 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-30 16:48:43.824075178 +0000 UTC m=+107.307103291 E0730 16:48:46.231609 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" I0730 16:48:46.271190 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-30 16:48:46.271175836 +0000 UTC m=+109.754203959 I0730 16:48:46.293573 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-30 16:48:46.293561109 +0000 UTC m=+109.776589192 E0730 16:48:48.071088 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" I0730 16:48:48.108618 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-30 16:48:48.10857684 +0000 UTC m=+111.591604933 I0730 16:48:48.131009 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-30 16:48:48.13099838 +0000 UTC m=+111.614026493 E0730 16:48:49.787696 1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" I0730 16:48:49.837609 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-30 16:48:49.837598723 +0000 UTC m=+113.320626806 I0730 16:48:49.853957 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-30 16:48:49.853941597 +0000 UTC m=+113.336969710