apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-07-24T00:37:10Z" generateName: capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8- labels: cluster.x-k8s.io/provider: control-plane-kubeadm control-plane: controller-manager pod-template-hash: 6b6ccbf6b8 name: capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-gttkk namespace: capi-kubeadm-control-plane-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8 uid: 2725b401-2df5-44e4-a9d0-c85324e19d9e resourceVersion: "27018" uid: 31cf407e-e9e5-4b34-ab14-c75fb176e168 spec: containers: - args: - --leader-elect - --diagnostics-address=:8443 - --insecure-diagnostics=false - --feature-gates=MachinePool=true,ClusterTopology=true,KubeadmBootstrapFormatIgnition=false,PriorityQueue=true,ReconcilerRateLimiting=true,InPlaceUpdates=false,MachineTaintPropagation=false command: - /manager env: - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller:v1.13.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP - containerPort: 8443 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-xpkwl readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capi-kubeadm-control-plane-manager serviceAccountName: capi-kubeadm-control-plane-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capi-kubeadm-control-plane-webhook-service-cert - name: kube-api-access-xpkwl projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-24T00:37:10Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-24T00:45:00Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-24T00:45:00Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-24T00:37:10Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://6c14d76102ce2a691ca1ea1385fb90fafecef24d18ab55b59b95d48ab890b959 image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller:v1.13.2 imageID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-control-plane-controller@sha256:c0b5fb78d95f7ee0ebc8ca798dab13dd6d798c397d65931feaedf69b8acd6d2f lastState: terminated: containerID: containerd://14a6e13711f0591229ad6ef7c4ed096ccbd1770883569b02449e787062b9205d exitCode: 2 finishedAt: "2026-07-24T00:44:40Z" message: |2 1 main.go:245] FLAG: --namespace="" I0724 00:44:11.263311 1 main.go:245] FLAG: --profiler-address="" I0724 00:44:11.263314 1 main.go:245] FLAG: --remote-conditions-grace-period="5m0s" I0724 00:44:11.263317 1 main.go:245] FLAG: --runtime-extension-client-cert-file="" I0724 00:44:11.263319 1 main.go:245] FLAG: --runtime-extension-client-key-file="" I0724 00:44:11.263323 1 main.go:245] FLAG: --skip-crd-migration-phases="[]" I0724 00:44:11.263334 1 main.go:245] FLAG: --sync-period="10m0s" I0724 00:44:11.263337 1 main.go:245] FLAG: --tls-cipher-suites="[]" I0724 00:44:11.263341 1 main.go:245] FLAG: --tls-min-version="VersionTLS12" I0724 00:44:11.263343 1 main.go:245] FLAG: --v="2" I0724 00:44:11.263346 1 main.go:245] FLAG: --vmodule="" I0724 00:44:11.263349 1 main.go:245] FLAG: --watch-filter="" I0724 00:44:11.263351 1 main.go:245] FLAG: --webhook-cert-dir="/tmp/k8s-webhook-server/serving-certs/" I0724 00:44:11.263354 1 main.go:245] FLAG: --webhook-cert-name="tls.crt" I0724 00:44:11.263357 1 main.go:245] FLAG: --webhook-key-name="tls.key" I0724 00:44:11.263359 1 main.go:245] FLAG: --webhook-port="9443" I0724 00:44:11.263414 1 main.go:252] "Version: v1.13.2 (git commit: ebd807c66351f3ad96ca99b68d2219305d794640)" logger="setup" I0724 00:44:11.263700 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0724 00:44:11.263716 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0724 00:44:11.263721 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0724 00:44:11.263725 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0724 00:44:11.263729 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0724 00:44:11.263732 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false reason: Error startedAt: "2026-07-24T00:44:11Z" name: manager ready: true restartCount: 3 started: true state: running: startedAt: "2026-07-24T00:44:41Z" hostIP: 199.204.45.229 phase: Running podIP: 10.0.0.20 podIPs: - ip: 10.0.0.20 qosClass: BestEffort startTime: "2026-07-24T00:37:10Z"