apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: manager creationTimestamp: "2026-07-02T05:56:59Z" generateName: orc-controller-manager-b56d5d966- labels: control-plane: controller-manager pod-template-hash: b56d5d966 name: orc-controller-manager-b56d5d966-n9cxn namespace: orc-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: orc-controller-manager-b56d5d966 uid: 4bdc83b9-411f-4884-81f8-91114c212984 resourceVersion: "28642" uid: 2e2360e3-7e80-47d6-a8ae-63f4e2493ab4 spec: containers: - args: - --metrics-bind-address=:8443 - --leader-elect - --health-probe-bind-address=:8081 command: - /manager image: quay.io/orc/openstack-resource-controller:v2.2.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 256Mi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zb75p readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: orc-controller-manager serviceAccountName: orc-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-zb75p projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-02T05:56:59Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-02T06:01:39Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-02T06:01:39Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-02T05:56:59Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://49673e999977fe7418e467119454e7bbaf2908e65982b05e85066917f2b33db1 image: quay.io/orc/openstack-resource-controller:v2.2.0 imageID: quay.io/orc/openstack-resource-controller@sha256:e3c51b1c3048c3f8c2856a6327810981fd4624602091021c4d310092c85e247c lastState: terminated: containerID: containerd://a1584edbc337218110c326c7f59b2d623276b621aeca3912d7f94303fe156280 exitCode: 1 finishedAt: "2026-07-02T06:00:57Z" message: "edentials_deletion_guard_for_router\", \"controllerGroup\": \"\", \"controllerKind\": \"Secret\", \"worker count\": 1}\n2026-07-02T05:57:03Z\tINFO\tStarting Controller\t{\"controller\": \"credentials_deletion_guard_for_image\", \"controllerGroup\": \"\", \"controllerKind\": \"Secret\"}\n2026-07-02T05:57:03Z\tINFO\tStarting workers\t{\"controller\": \"credentials_deletion_guard_for_image\", \"controllerGroup\": \"\", \"controllerKind\": \"Secret\", \"worker count\": 1}\n2026-07-02T05:57:04Z\tINFO\tcontroller-runtime.metrics\tServing metrics server\t{\"bindAddress\": \":8443\", \"secure\": true}\nE0702 06:00:48.197456 \ 1 leaderelection.go:429] Failed to update lock optimistically: the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io f35396c5.k-orc.cloud), falling back to slow path\nE0702 06:00:53.195900 1 leaderelection.go:436] error retrieving resource lock orc-system/f35396c5.k-orc.cloud: Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": context deadline exceeded\nI0702 06:00:53.195960 1 leaderelection.go:297] failed to renew lease orc-system/f35396c5.k-orc.cloud: context deadline exceeded\nE0702 06:00:57.866121 1 leaderelection.go:322] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io \"f35396c5.k-orc.cloud\": the object has been modified; please apply your changes to the latest version and try again\n2026-07-02T06:00:57Z\tERROR\tsetup\tError starting manager\t{\"error\": \"problem running manager: leader election lost\"}\nmain.main\n\t/workspace/cmd/manager/main.go:121\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:272\n2026-07-02T06:00:57Z\tDEBUG\tevents\torc-controller-manager-b56d5d966-n9cxn_b6095f44-af70-4609-b59f-ea8c4a11a5b7 stopped leading\t{\"type\": \"Normal\", \"object\": {\"kind\":\"Lease\",\"namespace\":\"orc-system\",\"name\":\"f35396c5.k-orc.cloud\",\"uid\":\"a5fc2fd6-8794-4358-8196-a67eb041b08c\",\"apiVersion\":\"coordination.k8s.io/v1\",\"resourceVersion\":\"28400\"}, \"reason\": \"LeaderElection\"}\n" reason: Error startedAt: "2026-07-02T05:57:02Z" name: manager ready: true restartCount: 1 started: true state: running: startedAt: "2026-07-02T06:01:34Z" hostIP: 199.19.213.193 phase: Running podIP: 10.0.0.195 podIPs: - ip: 10.0.0.195 qosClass: Burstable startTime: "2026-07-02T05:56:59Z"