apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-26T11:18:31Z" generateName: capi-controller-manager-5647546676- labels: cluster.x-k8s.io/provider: cluster-api control-plane: controller-manager pod-template-hash: "5647546676" name: capi-controller-manager-5647546676-m5j4c namespace: capi-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capi-controller-manager-5647546676 uid: c6d88bc7-6284-4fd5-8c61-b1dd42014894 resourceVersion: "31013" uid: 9e081620-ab2c-4ebf-a4cb-3f7f97637d10 spec: containers: - args: - --leader-elect - --diagnostics-address=:8443 - --insecure-diagnostics=false - --feature-gates=MachinePool=true,ClusterTopology=true,RuntimeSDK=false,MachineSetPreflightChecks=true,MachineWaitForVolumeDetachConsiderVolumeAttachments=true,PriorityQueue=true,ReconcilerRateLimiting=true,InPlaceUpdates=false,MachineTaintPropagation=false command: - /manager env: - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller:v1.13.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP - containerPort: 8443 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-jcb8h readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capi-manager serviceAccountName: capi-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capi-webhook-service-cert - name: kube-api-access-jcb8h projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-26T11:18:31Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-26T11:24:37Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-26T11:24:37Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-26T11:18:31Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://81aa6f2558a3775f9dc94163264b74929e96b322182c5660998354c4e791af70 image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller:v1.13.2 imageID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/cluster-api-controller@sha256:e53df33f43352d5e7bf5a72fd4171c1447ef2123a4c551484e45395f3dbb1875 lastState: terminated: containerID: containerd://76ed83fb6d37458bf3da439338493db26951ab34d4c18f4063608d26a50ed03e exitCode: 1 finishedAt: "2026-06-26T11:24:13Z" message: | orker count=10 E0626 11:23:55.282134 1 leaderelection.go:445] "Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-system/leases/controller-leader-election-capi?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" lock="capi-system/controller-leader-election-capi" E0626 11:23:57.286163 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{controller-leader-election-capi.18bc9dc6ef9e21ce capi-system 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Lease,Namespace:capi-system,Name:controller-leader-election-capi,UID:a706869e-308c-4f36-8c92-4dac708795db,APIVersion:coordination.k8s.io/v1,ResourceVersion:30792,FieldPath:,},Reason:LeaderElection,Message:capi-controller-manager-5647546676-m5j4c_9b8e933f-8769-492a-8224-f6673dee0012 became leader,Source:EventSource{Component:capi-controller-manager-5647546676-m5j4c_9b8e933f-8769-492a-8224-f6673dee0012,Host:,},FirstTimestamp:2026-06-26 11:23:50.281077198 +0000 UTC m=+30.142683400,LastTimestamp:2026-06-26 11:23:50.281077198 +0000 UTC m=+30.142683400,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:capi-controller-manager-5647546676-m5j4c_9b8e933f-8769-492a-8224-f6673dee0012,ReportingInstance:,}" E0626 11:24:00.282436 1 leaderelection.go:452] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-system/leases/controller-leader-election-capi?timeout=5s\": context deadline exceeded" lock="capi-system/controller-leader-election-capi" I0626 11:24:00.282508 1 leaderelection.go:299] "Failed to renew lease" lock="capi-system/controller-leader-election-capi" err="context deadline exceeded" E0626 11:24:00.282614 1 main.go:402] "Problem running manager" err="leader election lost" logger="setup" reason: Error startedAt: "2026-06-26T11:23:20Z" name: manager ready: true restartCount: 2 started: true state: running: startedAt: "2026-06-26T11:24:35Z" hostIP: 199.204.45.23 phase: Running podIP: 10.0.0.16 podIPs: - ip: 10.0.0.16 qosClass: BestEffort startTime: "2026-06-26T11:18:31Z"