taloscluster-proxmox-return-path-csfarm-controlplane-02 created 2026-09-18 20:54:15, version 570

containers:
- command:
  - /bin/sh
  - -ec
  - "set -eu\nNFT=nft\n\nexternal_if=\nfor address_file in /sys/class/net/*/address;\
    \ do\n  if [ \"$(cat \"$address_file\")\" = \"02:52:fd:94:97:ab\" ]; then\n  \
    \  external_if=\"${address_file%/address}\"\n    external_if=\"${external_if##*/}\"\
    \n    break\n  fi\ndone\nif [ -z \"$external_if\" ]; then\n  echo \"external interface\
    \ with MAC 02:52:fd:94:97:ab was not found\" >&2\n  exit 1\nfi\n\ncleanup() {\n\
    \  \"$NFT\" delete table ip taloscluster_return_path 2>/dev/null || true\n}\n\
    trap cleanup EXIT\ncleanup\n\n\"$NFT\" -f - <<EOF\ntable ip taloscluster_return_path\
    \ {\n  chain prerouting {\n    type filter hook prerouting priority -160; policy\
    \ accept;\n    iifname \"$external_if\" ip daddr 141.142.36.0/24 ct direction\
    \ original ct mark set ct mark | 0x00002000\n    ct direction reply ct mark &\
    \ 0x00002000 != 0 meta mark set meta mark | 0x00002000\n  }\n}\nEOF\n\nwhile \"\
    $NFT\" list table ip taloscluster_return_path >/dev/null 2>&1; do\n  sleep 30\n\
    done\nexit 1\n"
  image: registry.k8s.io/kube-proxy:v1.36.4
  imagePullPolicy: IfNotPresent
  name: return-path
  resources:
    limits:
      memory: 32Mi
    requests:
      cpu: 5m
      memory: 8Mi
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      add:
      - NET_ADMIN
      drop:
      - ALL
    readOnlyRootFilesystem: true
    runAsGroup: 0
    runAsUser: 0
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostNetwork: true
nodeName: csfarm-controlplane-02
preemptionPolicy: PreemptLowerPriority
priority: 2000001000
priorityClassName: system-node-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds: 30
tolerations:
- operator: Exists

allocatedResources:
  cpu: 5m
  memory: 8Mi
conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:53:07Z'
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:53:06Z'
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:53:10Z'
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:53:10Z'
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:53:06Z'
  status: 'True'
  type: PodScheduled
containerStatuses:
- allocatedResources:
    cpu: 5m
    memory: 8Mi
  containerID: containerd://7b091e78e71f440c1e02409ec1c29c14faabebbd9bb9c1cd384fb1e29a5d0426
  image: registry.k8s.io/kube-proxy:v1.36.4
  imageID: registry.k8s.io/kube-proxy@sha256:b33fcdd8319290736e566f5fc2225ca07d3c2dfc025fb006342791aa31be4603
  lastState: {}
  name: return-path
  ready: true
  resources:
    limits:
      memory: 32Mi
    requests:
      cpu: 5m
      memory: 8Mi
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-18T20:53:10Z'
  user:
    linux:
      gid: 0
      supplementalGroups:
      - 0
      uid: 0
hostIP: 172.29.21.217
hostIPs:
- ip: 172.29.21.217
phase: Running
podIP: 172.29.21.217
podIPs:
- ip: 172.29.21.217
qosClass: Burstable
resources:
  limits:
    memory: 32Mi
  requests:
    cpu: 5m
    memory: 8Mi
startTime: '2026-09-18T20:53:06Z'