apiVersion: v1
kind: Pod
metadata:
annotations:
kubernetes.io/config.hash: 83c311c99631dbf7c2994f27b9efc2d4
kubernetes.io/config.mirror: 83c311c99631dbf7c2994f27b9efc2d4
kubernetes.io/config.seen: '2026-09-18T20:53:30.450603201Z'
kubernetes.io/config.source: http
talos.dev/config-version: '1'
talos.dev/secrets-version: '1'
creationTimestamp: '2026-09-18T20:54:44Z'
generation: 1
labels:
app.kubernetes.io/component: control-plane
app.kubernetes.io/managed-by: Talos
app.kubernetes.io/name: kube-controller-manager
app.kubernetes.io/version: 1.36.4
component: kube-controller-manager
k8s-app: kube-controller-manager
tier: control-plane
managedFields:
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:kubernetes.io/config.hash: {}
f:kubernetes.io/config.mirror: {}
f:kubernetes.io/config.seen: {}
f:kubernetes.io/config.source: {}
f:talos.dev/config-version: {}
f:talos.dev/secrets-version: {}
f:labels:
.: {}
f:app.kubernetes.io/component: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/version: {}
f:component: {}
f:k8s-app: {}
f:tier: {}
f:ownerReferences:
.: {}
k:{"uid":"c3d04dc2-2e43-4bdb-9dc8-f558eae57a90"}: {}
f:spec:
f:containers:
k:{"name":"kube-controller-manager"}:
.: {}
f:command: {}
f:env:
.: {}
k:{"name":"POD_IP"}:
.: {}
f:name: {}
f:valueFrom:
.: {}
f:fieldRef: {}
f:image: {}
f:imagePullPolicy: {}
f:livenessProbe:
.: {}
f:failureThreshold: {}
f:httpGet:
.: {}
f:host: {}
f:path: {}
f:port: {}
f:scheme: {}
f:periodSeconds: {}
f:successThreshold: {}
f:timeoutSeconds: {}
f:name: {}
f:resources:
.: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:securityContext:
.: {}
f:allowPrivilegeEscalation: {}
f:capabilities:
.: {}
f:drop: {}
f:seccompProfile:
.: {}
f:type: {}
f:startupProbe:
.: {}
f:failureThreshold: {}
f:httpGet:
.: {}
f:host: {}
f:path: {}
f:port: {}
f:scheme: {}
f:periodSeconds: {}
f:successThreshold: {}
f:timeoutSeconds: {}
f:terminationMessagePath: {}
f:terminationMessagePolicy: {}
f:volumeMounts:
.: {}
k:{"mountPath":"/system/secrets/kubernetes/kube-controller-manager"}:
.: {}
f:mountPath: {}
f:name: {}
f:readOnly: {}
f:dnsPolicy: {}
f:enableServiceLinks: {}
f:hostNetwork: {}
f:nodeName: {}
f:priority: {}
f:priorityClassName: {}
f:restartPolicy: {}
f:schedulerName: {}
f:securityContext:
.: {}
f:runAsGroup: {}
f:runAsNonRoot: {}
f:runAsUser: {}
f:terminationGracePeriodSeconds: {}
f:volumes:
.: {}
k:{"name":"secrets"}:
.: {}
f:hostPath:
.: {}
f:path: {}
f:type: {}
f:name: {}
manager: kubelet
operation: Update
time: '2026-09-18T20:54:44Z'
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:status:
f:allocatedResources:
.: {}
f:cpu: {}
f:memory: {}
f:conditions:
.: {}
k:{"type":"ContainersReady"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Initialized"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"PodReadyToStartContainers"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"PodScheduled"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Ready"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
f:containerStatuses: {}
f:hostIP: {}
f:hostIPs: {}
f:phase: {}
f:podIP: {}
f:podIPs:
.: {}
k:{"ip":"172.29.21.224"}:
.: {}
f:ip: {}
f:resources:
.: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:startTime: {}
manager: kubelet
operation: Update
subresource: status
time: '2026-09-18T20:54:46Z'
name: kube-controller-manager-csfarm-controlplane-01
namespace: kube-system
ownerReferences:
- apiVersion: v1
controller: true
kind: Node
name: csfarm-controlplane-01
uid: c3d04dc2-2e43-4bdb-9dc8-f558eae57a90
resourceVersion: '877'
uid: fee2d0e4-d225-4b77-908c-da1c79245df0
spec:
containers:
- command:
- /usr/local/bin/kube-controller-manager
- --use-service-account-credentials
- --allocate-node-cidrs=true
- --authentication-kubeconfig=/system/secrets/kubernetes/kube-controller-manager/kubeconfig
- --authorization-kubeconfig=/system/secrets/kubernetes/kube-controller-manager/kubeconfig
- --bind-address=127.0.0.1
- --cluster-cidr=10.244.0.0/16
- --cluster-signing-cert-file=/system/secrets/kubernetes/kube-controller-manager/ca.crt
- --cluster-signing-key-file=/system/secrets/kubernetes/kube-controller-manager/ca.key
- --configure-cloud-routes=false
- --controllers=*,tokencleaner
- --kubeconfig=/system/secrets/kubernetes/kube-controller-manager/kubeconfig
- --leader-elect=true
- --profiling=false
- --root-ca-file=/system/secrets/kubernetes/kube-controller-manager/ca.crt
- --service-account-private-key-file=/system/secrets/kubernetes/kube-controller-manager/service-account.key
- --service-cluster-ip-range=10.96.0.0/12
- --tls-min-version=VersionTLS13
env:
- name: POD_IP
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: status.podIP
image: registry.k8s.io/kube-controller-manager:v1.36.4
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
host: localhost
path: /healthz
port: 10257
scheme: HTTPS
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 15
name: kube-controller-manager
resources:
requests:
cpu: 50m
memory: 256Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
startupProbe:
failureThreshold: 12
httpGet:
host: localhost
path: /healthz
port: 10257
scheme: HTTPS
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /system/secrets/kubernetes/kube-controller-manager
name: secrets
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostNetwork: true
nodeName: csfarm-controlplane-01
preemptionPolicy: PreemptLowerPriority
priority: 2000000000
priorityClassName: system-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
runAsGroup: 65535
runAsNonRoot: true
runAsUser: 65535
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- hostPath:
path: /system/secrets/kubernetes/kube-controller-manager
type: ''
name: secrets
status:
allocatedResources:
cpu: 50m
memory: 256Mi
conditions:
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:31Z'
status: 'True'
type: PodReadyToStartContainers
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:30Z'
status: 'True'
type: Initialized
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:54:46Z'
status: 'True'
type: Ready
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:54:46Z'
status: 'True'
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:30Z'
status: 'True'
type: PodScheduled
containerStatuses:
- allocatedResources:
cpu: 50m
memory: 256Mi
containerID: containerd://f0a9d521cbed4a38725c8221adee98cc7af112e362e34fc35d76bba638c0cca2
image: registry.k8s.io/kube-controller-manager:v1.36.4
imageID: registry.k8s.io/kube-controller-manager@sha256:232878d552ad5395562c8a9091a6c963f897ffbcf08f39be8f57ba8776bb3821
lastState:
terminated:
containerID: containerd://4d8920dc9b5108f9d5c0fc659719be25e7e5451932ab41ebd75c181e4dd56efa
exitCode: 1
finishedAt: '2026-09-18T20:54:23Z'
reason: Error
startedAt: '2026-09-18T20:54:12Z'
name: kube-controller-manager
ready: true
resources:
requests:
cpu: 50m
memory: 256Mi
restartCount: 3
started: true
state:
running:
startedAt: '2026-09-18T20:54:44Z'
user:
linux:
gid: 65535
supplementalGroups:
- 65535
uid: 65535
volumeMounts:
- mountPath: /system/secrets/kubernetes/kube-controller-manager
name: secrets
readOnly: true
recursiveReadOnly: Disabled
hostIP: 172.29.21.224
hostIPs:
- ip: 172.29.21.224
phase: Running
podIP: 172.29.21.224
podIPs:
- ip: 172.29.21.224
qosClass: Burstable
resources:
requests:
cpu: 50m
memory: 256Mi
startTime: '2026-09-18T20:53:30Z'