cert-manager-webhook-558c6d4f4d-zrrnh created 2026-09-19 17:44:11, version 180324

app: webhook app.kubernetes.io/component: webhook app.kubernetes.io/instance: cert-manager app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: webhook app.kubernetes.io/version: v1.21.2 helm.sh/chart: cert-manager-v1.21.2 pod-template-hash: 558c6d4f4d
prometheus.io/path: /metrics prometheus.io/port: 9402 prometheus.io/scrape: true
Owner: cert-manager-webhook-558c6d4f4d (ReplicaSet)

Spec

containers:
- args:
  - --v=2
  - --secure-port=10250
  - --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
  - --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
  - --dynamic-serving-dns-names=cert-manager-webhook
  - --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)
  - --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc
  env:
  - name: POD_NAMESPACE
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.namespace
  image: quay.io/jetstack/cert-manager-webhook:v1.21.2
  imagePullPolicy: IfNotPresent
  livenessProbe:
    failureThreshold: 3
    httpGet:
      path: /livez
      port: healthcheck
      scheme: HTTP
    initialDelaySeconds: 60
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  name: cert-manager-webhook
  ports:
  - containerPort: 10250
    name: https
    protocol: TCP
  - containerPort: 6080
    name: healthcheck
    protocol: TCP
  - containerPort: 9402
    name: http-metrics
    protocol: TCP
  readinessProbe:
    failureThreshold: 3
    httpGet:
      path: /healthz
      port: healthcheck
      scheme: HTTP
    initialDelaySeconds: 5
    periodSeconds: 5
    successThreshold: 1
    timeoutSeconds: 1
  resources: {}
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-lmt9l
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: false
nodeName: csfarm-worker-02
nodeSelector:
  kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
serviceAccount: cert-manager-webhook
serviceAccountName: cert-manager-webhook
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- name: kube-api-access-lmt9l
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

Status

conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:12Z'
  observedGeneration: 1
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:11Z'
  observedGeneration: 1
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:20Z'
  observedGeneration: 1
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:20Z'
  observedGeneration: 1
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:44:11Z'
  observedGeneration: 1
  status: 'True'
  type: PodScheduled
containerStatuses:
- containerID: containerd://e6386c2dcab8dc708b9a6c349bf2d4730f961c4938ff789a52dc4acafb467267
  image: quay.io/jetstack/cert-manager-webhook:v1.21.2
  imageID: quay.io/jetstack/cert-manager-webhook@sha256:a60e2dac46dbb8a7f3df95c54ce941012f54c2fe022f0ee55aaa1ab40ed957ae
  lastState: {}
  name: cert-manager-webhook
  ready: true
  resources: {}
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-19T17:44:15Z'
  user:
    linux:
      gid: 65532
      supplementalGroups:
      - 65532
      uid: 65532
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-lmt9l
    readOnly: true
    recursiveReadOnly: Disabled
hostIP: 172.29.21.249
hostIPs:
- ip: 172.29.21.249
observedGeneration: 1
phase: Running
podIP: 10.244.1.8
podIPs:
- ip: 10.244.1.8
qosClass: BestEffort
resources: {}
startTime: '2026-09-19T17:44:11Z'

Events

Type Reason Age From Message
No events found.