ingress-nginx-controller-9b8594b5d-cst5c created 2025-03-30 12:17:24, version 3508119229

cni.projectcalico.org/podIP: cni.projectcalico.org/podIPs: container.seccomp.security.alpha.kubernetes.io/controller: runtime/default

Spec

containers:
- args:
  - /nginx-ingress-controller
  - --default-backend-service=$(POD_NAMESPACE)/ingress-nginx-defaultbackend
  - --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller
  - --election-id=ingress-nginx-leader
  - --controller-class=k8s.io/ingress-nginx
  - --ingress-class=public
  - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
  - --validating-webhook=:8443
  - --validating-webhook-certificate=/usr/local/certificates/cert
  - --validating-webhook-key=/usr/local/certificates/key
  - --watch-ingress-without-class=true
  env:
  - name: POD_NAME
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.name
  - name: POD_NAMESPACE
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.namespace
  - name: LD_PRELOAD
    value: /usr/local/lib/libmimalloc.so
  image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
  imagePullPolicy: IfNotPresent
  lifecycle:
    preStop:
      exec:
        command:
        - /wait-shutdown
  livenessProbe:
    failureThreshold: 5
    httpGet:
      path: /healthz
      port: 10254
      scheme: HTTP
    initialDelaySeconds: 10
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  name: controller
  ports:
  - containerPort: 80
    name: http
    protocol: TCP
  - containerPort: 443
    name: https
    protocol: TCP
  - containerPort: 8443
    name: webhook
    protocol: TCP
  readinessProbe:
    failureThreshold: 3
    httpGet:
      path: /healthz
      port: 10254
      scheme: HTTP
    initialDelaySeconds: 10
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  resources:
    requests:
      cpu: 100m
      memory: 400Mi
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      add:
      - NET_BIND_SERVICE
      drop:
      - ALL
    readOnlyRootFilesystem: false
    runAsGroup: 82
    runAsNonRoot: true
    runAsUser: 101
    seccompProfile:
      type: RuntimeDefault
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /usr/local/certificates/
    name: webhook-cert
    readOnly: true
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-5s2ff
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
nodeName: sed-infra-server-master-mcg58ax2-aa1e3892
nodeSelector:
  kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 1000000000
priorityClassName: scheduler-high-priority
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: ingress-nginx
serviceAccountName: ingress-nginx
terminationGracePeriodSeconds: 300
tolerations:
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- name: webhook-cert
  secret:
    defaultMode: 420
    secretName: ingress-nginx-admission
- name: kube-api-access-5s2ff
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

Status

conditions:
- lastProbeTime: null
  lastTransitionTime: '2025-03-30T12:17:24Z'
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2025-10-19T10:16:27Z'
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2025-10-19T10:16:27Z'
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2025-03-30T12:17:24Z'
  status: 'True'
  type: PodScheduled
containerStatuses:
- containerID: containerd://09008e31277d5da16873b89240c2f6a0c665330b66d17b8c6c2be7b13697d15a
  image: sha256:78e25eaa557d48a19963cbe751b91dc1d53e1c82aad6cd36c20e1c11eb04cd13
  imageID: registry.k8s.io/ingress-nginx/controller@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
  lastState:
    terminated:
      containerID: containerd://3cebc58f1eca797ae9f67719d60d084cce0bbf1a7035d358106a739597379ed3
      exitCode: 255
      finishedAt: '2025-10-19T10:15:24Z'
      reason: Unknown
      startedAt: '2025-10-10T05:12:30Z'
  name: controller
  ready: true
  restartCount: 7
  started: true
  state:
    running:
      startedAt: '2025-10-19T10:15:51Z'
hostIP: 192.168.1.3
phase: Running
podIP: 172.18.117.203
podIPs:
- ip: 172.18.117.203
qosClass: Burstable
startTime: '2025-03-30T12:17:24Z'

Events

Type Reason Age From Message
No events found.