Name: capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-fv4fz Namespace: capi-kubeadm-control-plane-system Priority: 0 Service Account: capi-kubeadm-control-plane-manager Node: instance/199.19.213.91 Start Time: Mon, 06 Jul 2026 13:07:22 +0000 Labels: cluster.x-k8s.io/provider=control-plane-kubeadm control-plane=controller-manager pod-template-hash=6b6ccbf6b8 Annotations: Status: Running SeccompProfile: RuntimeDefault IP: 10.0.0.217 IPs: IP: 10.0.0.217 Controlled By: ReplicaSet/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8 Containers: manager: Container ID: containerd://d25fa2f8a78fa8fd8338a248945e497f2f94161db885b169bef9ea1770024a2f Image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller:v1.13.2 Image ID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller@sha256:c0b5fb78d95f7ee0ebc8ca798dab13dd6d798c397d65931feaedf69b8acd6d2f Ports: 9443/TCP, 9440/TCP, 8443/TCP Host Ports: 0/TCP, 0/TCP, 0/TCP Command: /manager Args: --leader-elect --diagnostics-address=:8443 --insecure-diagnostics=false --feature-gates=MachinePool=true,ClusterTopology=true,KubeadmBootstrapFormatIgnition=false,PriorityQueue=true,ReconcilerRateLimiting=true,InPlaceUpdates=false,MachineTaintPropagation=false State: Running Started: Mon, 06 Jul 2026 13:16:14 +0000 Last State: Terminated Reason: Error Message: -file="" I0706 13:15:55.259252 1 main.go:245] FLAG: --runtime-extension-client-key-file="" I0706 13:15:55.259259 1 main.go:245] FLAG: --skip-crd-migration-phases="[]" I0706 13:15:55.259285 1 main.go:245] FLAG: --sync-period="10m0s" I0706 13:15:55.259292 1 main.go:245] FLAG: --tls-cipher-suites="[]" I0706 13:15:55.259316 1 main.go:245] FLAG: --tls-min-version="VersionTLS12" I0706 13:15:55.259323 1 main.go:245] FLAG: --v="2" I0706 13:15:55.259359 1 main.go:245] FLAG: --vmodule="" I0706 13:15:55.259446 1 main.go:245] FLAG: --watch-filter="" I0706 13:15:55.259462 1 main.go:245] FLAG: --webhook-cert-dir="/tmp/k8s-webhook-server/serving-certs/" I0706 13:15:55.259470 1 main.go:245] FLAG: --webhook-cert-name="tls.crt" I0706 13:15:55.259476 1 main.go:245] FLAG: --webhook-key-name="tls.key" I0706 13:15:55.259482 1 main.go:245] FLAG: --webhook-port="9443" I0706 13:15:55.259535 1 main.go:252] "Version: v1.13.2 (git commit: ebd807c66351f3ad96ca99b68d2219305d794640)" logger="setup" I0706 13:15:55.260198 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0706 13:15:55.260238 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0706 13:15:55.260249 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0706 13:15:55.260260 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0706 13:15:55.260270 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0706 13:15:55.260284 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false E0706 13:15:55.261246 1 main.go:311] "unable to start manager" err="failed to determine if *v1.Secret is namespaced: failed to get restmapping: failed to get server groups: Get \"https://10.96.0.1:443/api\": dial tcp 10.96.0.1:443: connect: connection refused" logger="setup" Exit Code: 1 Started: Mon, 06 Jul 2026 13:15:55 +0000 Finished: Mon, 06 Jul 2026 13:15:55 +0000 Ready: True Restart Count: 2 Liveness: http-get http://:healthz/healthz delay=0s timeout=1s period=10s #success=1 #failure=3 Readiness: http-get http://:healthz/readyz delay=0s timeout=1s period=10s #success=1 #failure=3 Environment: POD_NAMESPACE: capi-kubeadm-control-plane-system (v1:metadata.namespace) POD_NAME: capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-fv4fz (v1:metadata.name) POD_UID: (v1:metadata.uid) Mounts: /tmp/k8s-webhook-server/serving-certs from cert (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-9g9jq (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: cert: Type: Secret (a volume populated by a Secret) SecretName: capi-kubeadm-control-plane-webhook-service-cert Optional: false kube-api-access-9g9jq: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: openstack-control-plane=enabled Tolerations: node-role.kubernetes.io/control-plane:NoSchedule node-role.kubernetes.io/master:NoSchedule node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 44m default-scheduler Successfully assigned capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-fv4fz to instance Normal Pulled 44m kubelet Container image "harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller:v1.13.2" already present on machine Normal Created 44m kubelet Created container manager Normal Started 44m kubelet Started container manager Warning Unhealthy 38m (x3 over 38m) kubelet Liveness probe failed: Get "http://10.0.0.217:9440/healthz": dial tcp 10.0.0.217:9440: connect: connection refused Normal Killing 37m (x5 over 38m) kubelet Container manager failed liveness probe, will be restarted Warning Unhealthy 37m (x15 over 38m) kubelet Readiness probe failed: Get "http://10.0.0.217:9440/readyz": dial tcp 10.0.0.217:9440: connect: connection refused