apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-05-09T13:40:25Z" generateName: capo-controller-manager-65565fdb7f- labels: cluster.x-k8s.io/provider: infrastructure-openstack control-plane: capo-controller-manager pod-template-hash: 65565fdb7f name: capo-controller-manager-65565fdb7f-nftcc namespace: capo-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capo-controller-manager-65565fdb7f uid: c3c6a4ab-fb69-4cc8-a1b4-170c9c30014f resourceVersion: "25417" uid: 034b24e9-072b-4b74-a222-be30becfebdc spec: containers: - args: - --leader-elect - --v=2 - --diagnostics-address=127.0.0.1:8080 - --insecure-diagnostics=true command: - /manager env: - name: CLUSTER_API_OPENSTACK_INSTANCE_CREATE_TIMEOUT value: "10" image: harbor.atmosphere.dev/registry.k8s.io/capi-openstack/capi-openstack-controller:v0.12.7 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-pwtrh readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capo-manager serviceAccountName: capo-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capo-webhook-service-cert - name: kube-api-access-pwtrh projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-05-09T13:40:25Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-05-09T13:45:14Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-05-09T13:45:14Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-05-09T13:40:25Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://591d29fdbd1ec660b39f081b18fa3959b297d65338e66b4de284c51c1bb382e4 image: harbor.atmosphere.dev/registry.k8s.io/capi-openstack/capi-openstack-controller:v0.12.7 imageID: harbor.atmosphere.dev/registry.k8s.io/capi-openstack/capi-openstack-controller@sha256:b964c2f374ad4f26a593749d3c737492d5c1821db143b26596c9285b9055a8b4 lastState: terminated: containerID: containerd://70facf78177dd8a3986d1ba33f5b3920b024a2aee49e11b59c93ac3af8559d37 exitCode: 1 finishedAt: "2026-05-09T13:45:10Z" message: |2 Caches populated for *v1alpha1.Image from pkg/mod/k8s.io/client-go@v0.31.14/tools/cache/reflector.go:243 I0509 13:40:37.503185 1 controller.go:217] "Starting workers" controller="openstackcluster" controllerGroup="infrastructure.cluster.x-k8s.io" controllerKind="OpenStackCluster" worker count=10 I0509 13:40:37.503356 1 controller.go:217] "Starting workers" controller="openstackfloatingippool" controllerGroup="infrastructure.cluster.x-k8s.io" controllerKind="OpenStackFloatingIPPool" worker count=1 I0509 13:40:37.503522 1 controller.go:217] "Starting workers" controller="openstackmachine" controllerGroup="infrastructure.cluster.x-k8s.io" controllerKind="OpenStackMachine" worker count=10 I0509 13:40:37.507650 1 controller.go:217] "Starting workers" controller="openstackserver" controllerGroup="infrastructure.cluster.x-k8s.io" controllerKind="OpenStackServer" worker count=10 E0509 13:44:59.413695 1 leaderelection.go:429] Failed to update lock optimitically: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capo-system/leases/controller-leader-election-capo?timeout=5s": net/http: request canceled (Client.Timeout exceeded while awaiting headers), falling back to slow path E0509 13:45:04.413984 1 leaderelection.go:436] error retrieving resource lock capo-system/controller-leader-election-capo: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capo-system/leases/controller-leader-election-capo?timeout=5s": context deadline exceeded I0509 13:45:04.414049 1 leaderelection.go:297] failed to renew lease capo-system/controller-leader-election-capo: timed out waiting for the condition E0509 13:45:07.898109 1 leaderelection.go:322] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "controller-leader-election-capo": the object has been modified; please apply your changes to the latest version and try again E0509 13:45:07.898237 1 main.go:281] "problem running manager" err="leader election lost" logger="setup" reason: Error startedAt: "2026-05-09T13:40:25Z" name: manager ready: true restartCount: 1 started: true state: running: startedAt: "2026-05-09T13:45:12Z" hostIP: 199.204.45.235 phase: Running podIP: 10.0.0.130 podIPs: - ip: 10.0.0.130 qosClass: BestEffort startTime: "2026-05-09T13:40:25Z"