Name: capi-kubeadm-bootstrap-controller-manager-67b8b974d6-kj92k Namespace: capi-kubeadm-bootstrap-system Priority: 0 Service Account: capi-kubeadm-bootstrap-manager Node: instance/199.19.213.116 Start Time: Thu, 09 Jul 2026 17:38:00 +0000 Labels: cluster.x-k8s.io/provider=bootstrap-kubeadm control-plane=controller-manager pod-template-hash=67b8b974d6 Annotations: Status: Running SeccompProfile: RuntimeDefault IP: 10.0.0.213 IPs: IP: 10.0.0.213 Controlled By: ReplicaSet/capi-kubeadm-bootstrap-controller-manager-67b8b974d6 Containers: manager: Container ID: containerd://5f3e321b6918e2ae7cb2967b5c3891bb8be0e87d376d79feb8cc73270773dc7c Image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.13.2 Image ID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller@sha256:864c7a385db1811c9db402a75632921fb695c06b7c42e63cb9b1b387cfa92f6b Ports: 9443/TCP, 9440/TCP, 8443/TCP Host Ports: 0/TCP, 0/TCP, 0/TCP Command: /manager Args: --leader-elect --diagnostics-address=:8443 --insecure-diagnostics=false --feature-gates=MachinePool=true,KubeadmBootstrapFormatIgnition=false,PriorityQueue=true,ReconcilerRateLimiting=true --bootstrap-token-ttl=15m State: Running Started: Thu, 09 Jul 2026 17:45:45 +0000 Last State: Terminated Reason: Error Message: 202] FLAG: --namespace="" I0709 17:45:20.914347 1 main.go:202] FLAG: --profiler-address="" I0709 17:45:20.914350 1 main.go:202] FLAG: --skip-crd-migration-phases="[]" I0709 17:45:20.914370 1 main.go:202] FLAG: --sync-period="10m0s" I0709 17:45:20.914373 1 main.go:202] FLAG: --tls-cipher-suites="[]" I0709 17:45:20.914385 1 main.go:202] FLAG: --tls-min-version="VersionTLS12" I0709 17:45:20.914388 1 main.go:202] FLAG: --v="2" I0709 17:45:20.914393 1 main.go:202] FLAG: --vmodule="" I0709 17:45:20.914398 1 main.go:202] FLAG: --watch-filter="" I0709 17:45:20.914400 1 main.go:202] FLAG: --webhook-cert-dir="/tmp/k8s-webhook-server/serving-certs/" I0709 17:45:20.914404 1 main.go:202] FLAG: --webhook-cert-name="tls.crt" I0709 17:45:20.914409 1 main.go:202] FLAG: --webhook-key-name="tls.key" I0709 17:45:20.914411 1 main.go:202] FLAG: --webhook-port="9443" I0709 17:45:20.914461 1 main.go:209] "Version: v1.13.2 (git commit: ebd807c66351f3ad96ca99b68d2219305d794640)" logger="setup" I0709 17:45:20.914837 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0709 17:45:20.914859 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0709 17:45:20.914866 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0709 17:45:20.914871 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0709 17:45:20.914876 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0709 17:45:20.914881 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true E0709 17:45:20.915448 1 main.go:259] "unable to start manager" err="failed to determine if *v1.Secret is namespaced: failed to get restmapping: failed to get server groups: Get \"https://10.96.0.1:443/api\": dial tcp 10.96.0.1:443: connect: connection refused" logger="setup" Exit Code: 1 Started: Thu, 09 Jul 2026 17:45:20 +0000 Finished: Thu, 09 Jul 2026 17:45:20 +0000 Ready: True Restart Count: 3 Liveness: http-get http://:healthz/healthz delay=0s timeout=1s period=10s #success=1 #failure=3 Readiness: http-get http://:healthz/readyz delay=0s timeout=1s period=10s #success=1 #failure=3 Environment: POD_NAMESPACE: capi-kubeadm-bootstrap-system (v1:metadata.namespace) POD_NAME: capi-kubeadm-bootstrap-controller-manager-67b8b974d6-kj92k (v1:metadata.name) POD_UID: (v1:metadata.uid) Mounts: /tmp/k8s-webhook-server/serving-certs from cert (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-pnx5c (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: cert: Type: Secret (a volume populated by a Secret) SecretName: capi-kubeadm-bootstrap-webhook-service-cert Optional: false kube-api-access-pnx5c: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: openstack-control-plane=enabled Tolerations: node-role.kubernetes.io/control-plane:NoSchedule node-role.kubernetes.io/master:NoSchedule node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 40m default-scheduler Successfully assigned capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-kj92k to instance Normal Pulling 40m kubelet Pulling image "harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.13.2" Normal Pulled 39m kubelet Successfully pulled image "harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.13.2" in 207ms (3.167s including waiting) Normal Created 39m kubelet Created container manager Normal Started 39m kubelet Started container manager Warning Unhealthy 35m (x3 over 35m) kubelet Liveness probe failed: Get "http://10.0.0.213:9440/healthz": dial tcp 10.0.0.213:9440: connect: connection refused Warning Unhealthy 34m (x14 over 35m) kubelet Readiness probe failed: Get "http://10.0.0.213:9440/readyz": dial tcp 10.0.0.213:9440: connect: connection refused Normal Killing 34m (x5 over 35m) kubelet Container manager failed liveness probe, will be restarted