This message was deleted.

solved, capi-controller-manager was missing roles and bindings

@wide-ghost-94846 where do those roles/bindings come from?

We reinstalled the "rancher-turtles" chart (using default values via the UI in our upstream/parent cluster) which also handles the CAPI components now - reading the 2.13.0 change log it seems this happens anyway during the update to 2.13.x but for us something did not work during that upgrade...

Thanks for sharing @wide-ghost-94846!