cert-manager-cainjector-6468bc96c7-m4zc5 created 2026-09-19 17:44:11, version 180293

app: cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/instance: cert-manager app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cainjector app.kubernetes.io/version: v1.21.2 helm.sh/chart: cert-manager-v1.21.2 pod-template-hash: 6468bc96c7
prometheus.io/path: /metrics prometheus.io/port: 9402 prometheus.io/scrape: true
Owner: cert-manager-cainjector-6468bc96c7 (ReplicaSet)

Spec

containers:
- args:
  - --v=2
  - --leader-election-namespace=kube-system
  env:
  - name: POD_NAMESPACE
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.namespace
  image: quay.io/jetstack/cert-manager-cainjector:v1.21.2
  imagePullPolicy: IfNotPresent
  name: cert-manager-cainjector
  ports:
  - containerPort: 9402
    name: http-metrics
    protocol: TCP
  resources: {}
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-gjj6v
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: false
nodeName: csfarm-worker-01
nodeSelector:
  kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
serviceAccount: cert-manager-cainjector
serviceAccountName: cert-manager-cainjector
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- name: kube-api-access-gjj6v
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

Status

conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:12Z'
  observedGeneration: 1
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:11Z'
  observedGeneration: 1
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:18Z'
  observedGeneration: 1
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:18Z'
  observedGeneration: 1
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:11Z'
  observedGeneration: 1
  status: 'True'
  type: PodScheduled
containerStatuses:
- containerID: containerd://0f547e31c77de755c152584e3d2bad0acdfed13d7c4cfceeca8c01026e0782b6
  image: quay.io/jetstack/cert-manager-cainjector:v1.21.2
  imageID: quay.io/jetstack/cert-manager-cainjector@sha256:c85268c64f2e0e76684bf5fe8906caff34b82523561c6affe0fae3546bd87562
  lastState: {}
  name: cert-manager-cainjector
  ready: true
  resources: {}
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-19T17:44:18Z'
  user:
    linux:
      gid: 65532
      supplementalGroups:
      - 65532
      uid: 65532
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-gjj6v
    readOnly: true
    recursiveReadOnly: Disabled
hostIP: 172.29.21.208
hostIPs:
- ip: 172.29.21.208
observedGeneration: 1
phase: Running
podIP: 10.244.0.6
podIPs:
- ip: 10.244.0.6
qosClass: BestEffort
resources: {}
startTime: '2026-09-19T17:44:11Z'

Events

Type Reason Age From Message
No events found.