apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-07-10T00:39:05Z" generateName: capi-controller-manager-5647546676- labels: cluster.x-k8s.io/provider: cluster-api control-plane: controller-manager pod-template-hash: "5647546676" name: capi-controller-manager-5647546676-fr29m namespace: capi-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capi-controller-manager-5647546676 uid: e77588c0-c5d6-4053-85b3-97a18641e541 resourceVersion: "30342" uid: 4f3518df-c853-4b26-9414-cc0c6349db92 spec: containers: - args: - --leader-elect - --diagnostics-address=:8443 - --insecure-diagnostics=false - --feature-gates=MachinePool=true,ClusterTopology=true,RuntimeSDK=false,MachineSetPreflightChecks=true,MachineWaitForVolumeDetachConsiderVolumeAttachments=true,PriorityQueue=true,ReconcilerRateLimiting=true,InPlaceUpdates=false,MachineTaintPropagation=false command: - /manager env: - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller:v1.13.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP - containerPort: 8443 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bffcl readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capi-manager serviceAccountName: capi-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capi-webhook-service-cert - name: kube-api-access-bffcl projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-10T00:39:05Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-10T00:46:16Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-10T00:46:16Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-10T00:39:05Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://029808ea6741110b6fbab8e9ec71cf163b8db77ccd54ec5644c20781073516ef image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller:v1.13.2 imageID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller@sha256:e53df33f43352d5e7bf5a72fd4171c1447ef2123a4c551484e45395f3dbb1875 lastState: terminated: containerID: containerd://ba56311a88a3bb7c2b7edb1c6db97db4e5c7775b797715079627b21b5740978d exitCode: 1 finishedAt: "2026-07-10T00:45:51Z" message: | 303] "Starting Controller" controller="crdmigrator" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I0710 00:44:56.655801 1 controller.go:306] "Starting workers" controller="crdmigrator" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 I0710 00:44:56.669445 1 controller.go:303] "Starting Controller" controller="clusterresourceset" controllerGroup="addons.cluster.x-k8s.io" controllerKind="ClusterResourceSet" I0710 00:44:56.669484 1 controller.go:306] "Starting workers" controller="clusterresourceset" controllerGroup="addons.cluster.x-k8s.io" controllerKind="ClusterResourceSet" worker count=10 E0710 00:45:46.031527 1 leaderelection.go:445] "Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-system/leases/controller-leader-election-capi?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" lock="capi-system/controller-leader-election-capi" E0710 00:45:51.031085 1 leaderelection.go:452] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-system/leases/controller-leader-election-capi?timeout=5s\": context deadline exceeded" lock="capi-system/controller-leader-election-capi" I0710 00:45:51.031139 1 leaderelection.go:299] "Failed to renew lease" lock="capi-system/controller-leader-election-capi" err="context deadline exceeded" E0710 00:45:51.031869 1 main.go:402] "Problem running manager" err="leader election lost" logger="setup" I0710 00:45:51.031870 1 recorder.go:116] "capi-controller-manager-5647546676-fr29m_81974a30-1fc9-4d18-b55b-a29dc926e76a stopped leading" logger="events" type="Normal" object={"kind":"Lease","namespace":"capi-system","name":"controller-leader-election-capi","uid":"c1ae1709-448a-4f71-9ced-a06a16c865ae","apiVersion":"coordination.k8s.io/v1","resourceVersion":"30145"} reason="LeaderElection" reason: Error startedAt: "2026-07-10T00:44:39Z" name: manager ready: true restartCount: 2 started: true state: running: startedAt: "2026-07-10T00:46:08Z" hostIP: 199.19.213.80 phase: Running podIP: 10.0.0.86 podIPs: - ip: 10.0.0.86 qosClass: BestEffort startTime: "2026-07-10T00:39:05Z"