apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: manager creationTimestamp: "2026-04-28T07:38:07Z" generateName: orc-controller-manager-6cb597b5d4- labels: control-plane: controller-manager pod-template-hash: 6cb597b5d4 name: orc-controller-manager-6cb597b5d4-rh2b8 namespace: orc-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: orc-controller-manager-6cb597b5d4 uid: f553110e-f4d6-4bec-97f6-0608ce13f0a2 resourceVersion: "21949" uid: 58d156f5-d0c9-4756-8fb3-e89d290124d3 spec: containers: - args: - --metrics-bind-address=:8443 - --leader-elect - --health-probe-bind-address=:8081 command: - /manager image: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller:v2.2.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 256Mi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-8d75c readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: orc-controller-manager serviceAccountName: orc-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-8d75c projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-04-28T07:38:07Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-04-28T07:52:07Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-04-28T07:52:07Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-04-28T07:38:07Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://d7337ac64bbba5d4fe64d30109b079b7459b04cba0f79b1492d0aad3df681e2e image: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller:v2.2.0 imageID: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller@sha256:e3c51b1c3048c3f8c2856a6327810981fd4624602091021c4d310092c85e247c lastState: terminated: containerID: containerd://f60cde8e5e21da46f65c202b4a175379ad8d18174d8c28d36fc1715c3167ad66 exitCode: 1 finishedAt: "2026-04-28T07:51:29Z" message: "orkers\t{\"controller\": \"credentials_deletion_guard_for_project\", \"controllerGroup\": \"\", \"controllerKind\": \"Secret\", \"worker count\": 1}\n2026-04-28T07:38:11Z\tINFO\tStarting Controller\t{\"controller\": \"router_deletion_guard_for_routerinterface\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Router\"}\n2026-04-28T07:38:11Z\tINFO\tStarting workers\t{\"controller\": \"router_deletion_guard_for_routerinterface\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Router\", \"worker count\": 1}\n2026-04-28T07:38:11Z\tINFO\tStarting Controller\t{\"controller\": \"server\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Server\"}\n2026-04-28T07:38:11Z\tINFO\tStarting workers\t{\"controller\": \"server\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Server\", \"worker count\": 1}\n2026-04-28T07:38:11Z\tINFO\tcontroller-runtime.metrics\tServing metrics server\t{\"bindAddress\": \":8443\", \"secure\": true}\nE0428 07:51:21.134251 \ 1 leaderelection.go:429] Failed to update lock optimistically: Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": context deadline exceeded, falling back to slow path\nE0428 07:51:26.131846 \ 1 leaderelection.go:436] error retrieving resource lock orc-system/f35396c5.k-orc.cloud: Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": context deadline exceeded\nI0428 07:51:26.131910 1 leaderelection.go:297] failed to renew lease orc-system/f35396c5.k-orc.cloud: context deadline exceeded\nE0428 07:51:29.787565 1 leaderelection.go:322] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io \"f35396c5.k-orc.cloud\": the object has been modified; please apply your changes to the latest version and try again\n2026-04-28T07:51:29Z\tERROR\tsetup\tError starting manager\t{\"error\": \"problem running manager: leader election lost\"}\nmain.main\n\t/workspace/cmd/manager/main.go:121\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:272\n" reason: Error startedAt: "2026-04-28T07:38:09Z" name: manager ready: true restartCount: 1 started: true state: running: startedAt: "2026-04-28T07:51:57Z" hostIP: 199.19.213.75 phase: Running podIP: 10.0.0.158 podIPs: - ip: 10.0.0.158 qosClass: Burstable startTime: "2026-04-28T07:38:07Z"