apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-07-21T07:26:59Z" generateName: capi-kubeadm-bootstrap-controller-manager-67b8b974d6- labels: cluster.x-k8s.io/provider: bootstrap-kubeadm control-plane: controller-manager pod-template-hash: 67b8b974d6 name: capi-kubeadm-bootstrap-controller-manager-67b8b974d6-z2lcd namespace: capi-kubeadm-bootstrap-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: capi-kubeadm-bootstrap-controller-manager-67b8b974d6 uid: 5d9d1b3b-6b14-465d-b78c-0739ace3f29b resourceVersion: "43579" uid: e2de138e-0b92-479c-92c3-ee9855c77d03 spec: containers: - args: - --leader-elect - --diagnostics-address=:8443 - --insecure-diagnostics=false - --feature-gates=MachinePool=true,KubeadmBootstrapFormatIgnition=false,PriorityQueue=true,ReconcilerRateLimiting=true - --bootstrap-token-ttl=15m command: - /manager env: - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.13.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 9440 name: healthz protocol: TCP - containerPort: 8443 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: healthz scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsGroup: 65532 runAsUser: 65532 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-nd8sj readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: capi-kubeadm-bootstrap-manager serviceAccountName: capi-kubeadm-bootstrap-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: cert secret: defaultMode: 420 secretName: capi-kubeadm-bootstrap-webhook-service-cert - name: kube-api-access-nd8sj projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-21T07:26:59Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-21T07:58:28Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-21T07:58:28Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-21T07:26:59Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://0eb9492c6744fa00208abf22ce91750837f45f6d444e57b310ff2fd8d4b84c40 image: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller:v1.13.2 imageID: harbor.atmosphere.dev/registry.k8s.io/cluster-api/kubeadm-bootstrap-controller@sha256:864c7a385db1811c9db402a75632921fb695c06b7c42e63cb9b1b387cfa92f6b lastState: terminated: containerID: containerd://cd7f961f588f00892c33ec6fb1f46828ee8a08024eea9fe506f90480241b4986 exitCode: 1 finishedAt: "2026-07-21T07:58:22Z" message: | Group="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 E0721 07:58:02.294538 1 leaderelection.go:445] "Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-kubeadm-bootstrap-system/leases/kubeadm-bootstrap-manager-leader-election-capi?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" lock="capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi" E0721 07:58:17.220857 1 leaderelection.go:445] "Failed to update lease optimistically, falling back to slow path" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io kubeadm-bootstrap-manager-leader-election-capi)" lock="capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi" E0721 07:58:22.220461 1 leaderelection.go:452] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/capi-kubeadm-bootstrap-system/leases/kubeadm-bootstrap-manager-leader-election-capi?timeout=5s\": context deadline exceeded" lock="capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi" I0721 07:58:22.220525 1 leaderelection.go:299] "Failed to renew lease" lock="capi-kubeadm-bootstrap-system/kubeadm-bootstrap-manager-leader-election-capi" err="context deadline exceeded" I0721 07:58:22.221287 1 recorder.go:116] "capi-kubeadm-bootstrap-controller-manager-67b8b974d6-z2lcd_a70e4a0b-f0d7-4a69-a960-7611a68a0f2f stopped leading" logger="events" type="Normal" object={"kind":"Lease","namespace":"capi-kubeadm-bootstrap-system","name":"kubeadm-bootstrap-manager-leader-election-capi","uid":"02786f27-5da6-4e09-8df7-d11c613a3b13","apiVersion":"coordination.k8s.io/v1","resourceVersion":"43467"} reason="LeaderElection" E0721 07:58:22.221426 1 main.go:272] "problem running manager" err="leader election lost" logger="setup" reason: Error startedAt: "2026-07-21T07:27:04Z" name: manager ready: true restartCount: 1 started: true state: running: startedAt: "2026-07-21T07:58:27Z" hostIP: 199.19.213.219 phase: Running podIP: 10.0.0.124 podIPs: - ip: 10.0.0.124 qosClass: BestEffort startTime: "2026-07-21T07:26:59Z"