apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-05-08T11:18:32Z" generateName: capi-kubeadm-bootstrap-controller-manager-6558cd8d7f- labels: cluster.x-k8s.io/provider: bootstrap-kubeadm control-plane: controller-manager pod-template-hash: 6558cd8d7f name: capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-khhc6 namespace: capi-kubeadm-bootstrap-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capi-kubeadm-bootstrap-controller-manager-6558cd8d7f uid: 16e706cf-8e22-4fdd-9d21-fd6710fc6bce resourceVersion: "35984" uid: 9e55ac00-2977-49a3-8249-e457edf5269a spec: containers: - args: - --leader-elect - --diagnostics-address=:8443 - --insecure-diagnostics=false - --feature-gates=MachinePool=true,KubeadmBootstrapFormatIgnition=false,PriorityQueue=false - --bootstrap-token-ttl=15m command: - /manager env: - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.10.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP - containerPort: 8443 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-nqt5c readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capi-kubeadm-bootstrap-manager serviceAccountName: capi-kubeadm-bootstrap-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capi-kubeadm-bootstrap-webhook-service-cert - name: kube-api-access-nqt5c projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-05-08T11:18:32Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-05-08T11:46:13Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-05-08T11:46:13Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-05-08T11:18:32Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://1b171d3065c933a102a8da28c3dec201cc7b25ec2b0c118f3c13312a4dff74a0 image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.10.5 imageID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller@sha256:e0f657538b3dc93a2eb0462561d0c895c78d9a515f048871bc90c927c0d4ce64 lastState: terminated: containerID: containerd://3e196f749721033f3f4aabf679049f270f9d42cb6ba108bb5f198d3b4d31bfc4 exitCode: 1 finishedAt: "2026-05-08T11:44:55Z" message: | er="kubeadmconfig" controllerGroup="bootstrap.cluster.x-k8s.io" controllerKind="KubeadmConfig" I0508 11:40:23.559623 1 controller.go:248] "Starting workers" controller="kubeadmconfig" controllerGroup="bootstrap.cluster.x-k8s.io" controllerKind="KubeadmConfig" worker count=10 I0508 11:40:23.559757 1 controller.go:239] "Starting Controller" controller="crdmigrator" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I0508 11:40:23.559765 1 controller.go:248] "Starting workers" controller="crdmigrator" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 E0508 11:44:50.344901 1 leaderelection.go:429] Failed to update lock optimistically: the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io kubeadm-bootstrap-manager-leader-election-capi), falling back to slow path E0508 11:44:55.347364 1 leaderelection.go:436] error retrieving resource lock capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi: the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io kubeadm-bootstrap-manager-leader-election-capi) E0508 11:44:55.348069 1 leaderelection.go:429] Failed to update lock optimistically: client rate limiter Wait returned an error: rate: Wait(n=1) would exceed context deadline, falling back to slow path E0508 11:44:55.348147 1 leaderelection.go:436] error retrieving resource lock capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi: client rate limiter Wait returned an error: rate: Wait(n=1) would exceed context deadline I0508 11:44:55.349622 1 leaderelection.go:297] failed to renew lease capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi: context deadline exceeded E0508 11:44:55.349749 1 main.go:306] "problem running manager" err="leader election lost" logger="setup" reason: Error startedAt: "2026-05-08T11:39:45Z" name: manager ready: true restartCount: 3 started: true state: running: startedAt: "2026-05-08T11:46:06Z" hostIP: 199.19.213.146 phase: Running podIP: 10.0.0.251 podIPs: - ip: 10.0.0.251 qosClass: BestEffort startTime: "2026-05-08T11:18:32Z"