cert-manager-664b88b4b4-68m8n created 2026-09-19 17:48:46, version 181048

app: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/instance: cert-manager app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cert-manager app.kubernetes.io/version: v1.21.2 helm.sh/chart: cert-manager-v1.21.2 pod-template-hash: 664b88b4b4
prometheus.io/path: /metrics prometheus.io/port: 9402 prometheus.io/scrape: true
Owner: cert-manager-664b88b4b4 (ReplicaSet)

Spec

containers:
- args:
  - --v=2
  - --cluster-resource-namespace=$(POD_NAMESPACE)
  - --leader-election-namespace=kube-system
  - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.21.2
  - --default-issuer-name=letsencrypt-prod
  - --default-issuer-kind=ClusterIssuer
  - --default-issuer-group=cert-manager.io
  - --max-concurrent-challenges=60
  env:
  - name: POD_NAMESPACE
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.namespace
  image: quay.io/jetstack/cert-manager-controller:v1.21.2
  imagePullPolicy: IfNotPresent
  livenessProbe:
    failureThreshold: 8
    httpGet:
      path: /livez
      port: http-healthz
      scheme: HTTP
    initialDelaySeconds: 10
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 15
  name: cert-manager-controller
  ports:
  - containerPort: 9402
    name: http-metrics
    protocol: TCP
  - containerPort: 9403
    name: http-healthz
    protocol: TCP
  resources: {}
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-l9r62
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: false
nodeName: csfarm-worker-02
nodeSelector:
  kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
serviceAccount: cert-manager
serviceAccountName: cert-manager
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- name: kube-api-access-l9r62
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

Status

conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:48:47Z'
  observedGeneration: 1
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:48:46Z'
  observedGeneration: 1
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:48:49Z'
  observedGeneration: 1
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:48:49Z'
  observedGeneration: 1
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:48:46Z'
  observedGeneration: 1
  status: 'True'
  type: PodScheduled
containerStatuses:
- containerID: containerd://354985f6f7aa314bba48e7c25fa90f7fb9f748dc5e2d763796fe9a2b3008cf68
  image: quay.io/jetstack/cert-manager-controller:v1.21.2
  imageID: quay.io/jetstack/cert-manager-controller@sha256:70f532fd9cfde0b09d55687200942399d89838bc2d5d5b45152eb799a15912b8
  lastState: {}
  name: cert-manager-controller
  ready: true
  resources: {}
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-19T17:48:49Z'
  user:
    linux:
      gid: 65532
      supplementalGroups:
      - 65532
      uid: 65532
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-l9r62
    readOnly: true
    recursiveReadOnly: Disabled
hostIP: 172.29.21.249
hostIPs:
- ip: 172.29.21.249
observedGeneration: 1
phase: Running
podIP: 10.244.1.9
podIPs:
- ip: 10.244.1.9
qosClass: BestEffort
resources: {}
startTime: '2026-09-19T17:48:46Z'

Events

Type Reason Age From Message
No events found.