apiVersion: v1
kind: Pod
metadata:
annotations:
cni.projectcalico.org/podIP: ''
cni.projectcalico.org/podIPs: ''
creationTimestamp: '2023-09-05T21:58:50Z'
generateName: cert-manager-cainjector-67f66dcf64-
labels:
app: cainjector
app.kubernetes.io/component: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.9.1
helm.sh/chart: cert-manager-v1.9.1
pod-template-hash: 67f66dcf64
managedFields:
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:cni.projectcalico.org/podIP: {}
f:cni.projectcalico.org/podIPs: {}
manager: calico
operation: Update
time: '2023-09-05T21:58:51Z'
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:generateName: {}
f:labels:
.: {}
f:app: {}
f:app.kubernetes.io/component: {}
f:app.kubernetes.io/instance: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/version: {}
f:helm.sh/chart: {}
f:pod-template-hash: {}
f:ownerReferences:
.: {}
k:{"uid":"4d0c0cec-39c2-49e9-b2b9-f96ac9cba89a"}:
.: {}
f:apiVersion: {}
f:blockOwnerDeletion: {}
f:controller: {}
f:kind: {}
f:name: {}
f:uid: {}
f:spec:
f:containers:
k:{"name":"cert-manager"}:
.: {}
f:args: {}
f:env:
.: {}
k:{"name":"POD_NAMESPACE"}:
.: {}
f:name: {}
f:valueFrom:
.: {}
f:fieldRef:
.: {}
f:apiVersion: {}
f:fieldPath: {}
f:image: {}
f:imagePullPolicy: {}
f:name: {}
f:resources:
.: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:securityContext:
.: {}
f:allowPrivilegeEscalation: {}
f:terminationMessagePath: {}
f:terminationMessagePolicy: {}
f:dnsPolicy: {}
f:enableServiceLinks: {}
f:nodeSelector:
.: {}
f:kubernetes.io/os: {}
f:restartPolicy: {}
f:schedulerName: {}
f:securityContext:
.: {}
f:runAsNonRoot: {}
f:serviceAccount: {}
f:serviceAccountName: {}
f:terminationGracePeriodSeconds: {}
f:status:
f:conditions:
k:{"type":"ContainersReady"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Initialized"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Ready"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
f:containerStatuses: {}
f:hostIP: {}
f:phase: {}
f:podIP: {}
f:podIPs:
.: {}
k:{"ip":"172.18.117.219"}:
.: {}
f:ip: {}
f:startTime: {}
manager: k3s
operation: Update
time: '2025-10-19T10:16:20Z'
name: cert-manager-cainjector-67f66dcf64-x77xh
namespace: cert-manager
ownerReferences:
- apiVersion: apps/v1
blockOwnerDeletion: true
controller: true
kind: ReplicaSet
name: cert-manager-cainjector-67f66dcf64
uid: 4d0c0cec-39c2-49e9-b2b9-f96ac9cba89a
resourceVersion: '3508118394'
uid: 7594f7ed-3d9c-467b-902b-cf530f608289
spec:
containers:
- args:
- --v=2
- --leader-election-namespace=kube-system
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-cainjector:v1.9.1
imagePullPolicy: IfNotPresent
name: cert-manager
resources:
requests:
cpu: 50m
memory: 128Mi
securityContext:
allowPrivilegeEscalation: false
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-6hnmj
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
nodeName: sed-infra-server-master-mcg58ax2-aa1e3892
nodeSelector:
kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
runAsNonRoot: true
serviceAccount: cert-manager-cainjector
serviceAccountName: cert-manager-cainjector
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- name: kube-api-access-6hnmj
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
status:
conditions:
- lastProbeTime: null
lastTransitionTime: '2023-09-05T21:58:50Z'
status: 'True'
type: Initialized
- lastProbeTime: null
lastTransitionTime: '2025-10-19T10:15:41Z'
status: 'True'
type: Ready
- lastProbeTime: null
lastTransitionTime: '2025-10-19T10:15:41Z'
status: 'True'
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: '2023-09-05T21:58:50Z'
status: 'True'
type: PodScheduled
containerStatuses:
- containerID: containerd://60d5af400908c4ebe9cb1de60cec32af0c27882631c12ab6c6cad6052dad0d86
image: quay.io/jetstack/cert-manager-cainjector:v1.9.1
imageID: quay.io/jetstack/cert-manager-cainjector@sha256:df7f0b5186ddb84eccb383ed4b10ec8b8e2a52e0e599ec51f98086af5f4b4938
lastState:
terminated:
containerID: containerd://a3828f05ba478dad7125d458321e669070ccc6af7c51c18eb7499c03e9fcb7ae
exitCode: 255
finishedAt: '2025-10-19T10:15:24Z'
reason: Unknown
startedAt: '2025-10-10T05:12:44Z'
name: cert-manager
ready: true
restartCount: 20
started: true
state:
running:
startedAt: '2025-10-19T10:15:40Z'
hostIP: 192.168.1.3
phase: Running
podIP: 172.18.117.219
podIPs:
- ip: 172.18.117.219
qosClass: Burstable
startTime: '2023-09-05T21:58:50Z'