apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: manager creationTimestamp: "2026-05-09T13:39:50Z" generateName: orc-controller-manager-6cb597b5d4- labels: control-plane: controller-manager pod-template-hash: 6cb597b5d4 name: orc-controller-manager-6cb597b5d4-4wwxl namespace: orc-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: orc-controller-manager-6cb597b5d4 uid: 06c31b46-da76-473d-8dd6-a175e9c03848 resourceVersion: "25837" uid: 875b26b7-7b1d-4239-ba8d-99cb5abf0d86 spec: containers: - args: - --metrics-bind-address=:8443 - --leader-elect - --health-probe-bind-address=:8081 command: - /manager image: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller:v2.2.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 256Mi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-xfggn readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: orc-controller-manager serviceAccountName: orc-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-xfggn projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-05-09T13:39:50Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-05-09T13:47:20Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-05-09T13:47:20Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-05-09T13:39:50Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://f352be782ceede73f2e9a2ab646d1330ab409a83a7bcb76c53187cb74d153fb5 image: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller:v2.2.0 imageID: harbor.atmosphere.dev/quay.io/orc/openstack-resource-controller@sha256:e3c51b1c3048c3f8c2856a6327810981fd4624602091021c4d310092c85e247c lastState: terminated: containerID: containerd://998984d514d91fc45e10ce7069a24a80571438baa848d1379f0f601527eb1e2f exitCode: 1 finishedAt: "2026-05-09T13:46:43Z" message: "\": \"credentials_deletion_guard_for_server\", \"controllerGroup\": \"\", \"controllerKind\": \"Secret\", \"worker count\": 1}\n2026-05-09T13:45:13Z\tINFO\tStarting Controller\t{\"controller\": \"securitygroup\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"SecurityGroup\"}\n2026-05-09T13:45:13Z\tINFO\tStarting workers\t{\"controller\": \"securitygroup\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"SecurityGroup\", \"worker count\": 1}\n2026-05-09T13:45:13Z\tINFO\tStarting Controller\t{\"controller\": \"port_deletion_guard_for_server\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Port\"}\n2026-05-09T13:45:13Z\tINFO\tStarting workers\t{\"controller\": \"port_deletion_guard_for_server\", \"controllerGroup\": \"openstack.k-orc.cloud\", \"controllerKind\": \"Port\", \"worker count\": 1}\n2026-05-09T13:45:14Z\tINFO\tcontroller-runtime.metrics\tServing metrics server\t{\"bindAddress\": \":8443\", \"secure\": true}\nE0509 13:45:55.528864 \ 1 leaderelection.go:429] Failed to update lock optimistically: Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers), falling back to slow path\nE0509 13:46:00.529043 1 leaderelection.go:436] error retrieving resource lock orc-system/f35396c5.k-orc.cloud: Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": context deadline exceeded\nI0509 13:46:00.529151 1 leaderelection.go:297] failed to renew lease orc-system/f35396c5.k-orc.cloud: context deadline exceeded\nE0509 13:46:05.529692 1 leaderelection.go:322] Failed to release lock: Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/orc-system/leases/f35396c5.k-orc.cloud?timeout=5s\": context deadline exceeded\n2026-05-09T13:46:05Z\tERROR\tsetup\tError starting manager\t{\"error\": \"problem running manager: leader election lost\"}\nmain.main\n\t/workspace/cmd/manager/main.go:121\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:272\n" reason: Error startedAt: "2026-05-09T13:45:12Z" name: manager ready: true restartCount: 2 started: true state: running: startedAt: "2026-05-09T13:47:07Z" hostIP: 199.204.45.19 phase: Running podIP: 10.0.0.174 podIPs: - ip: 10.0.0.174 qosClass: Burstable startTime: "2026-05-09T13:39:50Z"