apiVersion: v1
kind: Pod
metadata:
annotations:
kubernetes.io/config.hash: 42de2656d986c0bc1d9635bb80d8f66d
kubernetes.io/config.mirror: 42de2656d986c0bc1d9635bb80d8f66d
kubernetes.io/config.seen: '2026-09-18T20:53:06.573488098Z'
kubernetes.io/config.source: http
creationTimestamp: '2026-09-18T20:54:15Z'
generation: 1
managedFields:
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:kubernetes.io/config.hash: {}
f:kubernetes.io/config.mirror: {}
f:kubernetes.io/config.seen: {}
f:kubernetes.io/config.source: {}
f:ownerReferences:
.: {}
k:{"uid":"aa16654e-03a6-4d9f-a0e6-65f52b9d0900"}: {}
f:spec:
f:containers:
k:{"name":"return-path"}:
.: {}
f:command: {}
f:image: {}
f:imagePullPolicy: {}
f:name: {}
f:resources:
.: {}
f:limits:
.: {}
f:memory: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:securityContext:
.: {}
f:allowPrivilegeEscalation: {}
f:capabilities:
.: {}
f:add: {}
f:drop: {}
f:readOnlyRootFilesystem: {}
f:runAsGroup: {}
f:runAsUser: {}
f:terminationMessagePath: {}
f:terminationMessagePolicy: {}
f:dnsPolicy: {}
f:enableServiceLinks: {}
f:hostNetwork: {}
f:nodeName: {}
f:priorityClassName: {}
f:restartPolicy: {}
f:schedulerName: {}
f:securityContext: {}
f:terminationGracePeriodSeconds: {}
f:tolerations: {}
manager: kubelet
operation: Update
time: '2026-09-18T20:54:15Z'
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:status:
f:allocatedResources:
.: {}
f:cpu: {}
f:memory: {}
f:conditions:
.: {}
k:{"type":"ContainersReady"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Initialized"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"PodReadyToStartContainers"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"PodScheduled"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
k:{"type":"Ready"}:
.: {}
f:lastProbeTime: {}
f:lastTransitionTime: {}
f:status: {}
f:type: {}
f:containerStatuses: {}
f:hostIP: {}
f:hostIPs: {}
f:phase: {}
f:podIP: {}
f:podIPs:
.: {}
k:{"ip":"172.29.21.217"}:
.: {}
f:ip: {}
f:resources:
.: {}
f:limits:
.: {}
f:memory: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:startTime: {}
manager: kubelet
operation: Update
subresource: status
time: '2026-09-18T20:54:15Z'
name: taloscluster-proxmox-return-path-csfarm-controlplane-02
namespace: kube-system
ownerReferences:
- apiVersion: v1
controller: true
kind: Node
name: csfarm-controlplane-02
uid: aa16654e-03a6-4d9f-a0e6-65f52b9d0900
resourceVersion: '570'
uid: 0446c6c4-5fbd-4f5c-bf96-3c3b4ed72f9f
spec:
containers:
- command:
- /bin/sh
- -ec
- "set -eu\nNFT=nft\n\nexternal_if=\nfor address_file in /sys/class/net/*/address;\
\ do\n if [ \"$(cat \"$address_file\")\" = \"02:52:fd:94:97:ab\" ]; then\n\
\ external_if=\"${address_file%/address}\"\n external_if=\"${external_if##*/}\"\
\n break\n fi\ndone\nif [ -z \"$external_if\" ]; then\n echo \"external\
\ interface with MAC 02:52:fd:94:97:ab was not found\" >&2\n exit 1\nfi\n\n\
cleanup() {\n \"$NFT\" delete table ip taloscluster_return_path 2>/dev/null\
\ || true\n}\ntrap cleanup EXIT\ncleanup\n\n\"$NFT\" -f - <<EOF\ntable ip taloscluster_return_path\
\ {\n chain prerouting {\n type filter hook prerouting priority -160; policy\
\ accept;\n iifname \"$external_if\" ip daddr 141.142.36.0/24 ct direction\
\ original ct mark set ct mark | 0x00002000\n ct direction reply ct mark\
\ & 0x00002000 != 0 meta mark set meta mark | 0x00002000\n }\n}\nEOF\n\nwhile\
\ \"$NFT\" list table ip taloscluster_return_path >/dev/null 2>&1; do\n sleep\
\ 30\ndone\nexit 1\n"
image: registry.k8s.io/kube-proxy:v1.36.4
imagePullPolicy: IfNotPresent
name: return-path
resources:
limits:
memory: 32Mi
requests:
cpu: 5m
memory: 8Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_ADMIN
drop:
- ALL
readOnlyRootFilesystem: true
runAsGroup: 0
runAsUser: 0
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostNetwork: true
nodeName: csfarm-controlplane-02
preemptionPolicy: PreemptLowerPriority
priority: 2000001000
priorityClassName: system-node-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds: 30
tolerations:
- operator: Exists
status:
allocatedResources:
cpu: 5m
memory: 8Mi
conditions:
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:07Z'
status: 'True'
type: PodReadyToStartContainers
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:06Z'
status: 'True'
type: Initialized
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:10Z'
status: 'True'
type: Ready
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:10Z'
status: 'True'
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: '2026-09-18T20:53:06Z'
status: 'True'
type: PodScheduled
containerStatuses:
- allocatedResources:
cpu: 5m
memory: 8Mi
containerID: containerd://7b091e78e71f440c1e02409ec1c29c14faabebbd9bb9c1cd384fb1e29a5d0426
image: registry.k8s.io/kube-proxy:v1.36.4
imageID: registry.k8s.io/kube-proxy@sha256:b33fcdd8319290736e566f5fc2225ca07d3c2dfc025fb006342791aa31be4603
lastState: {}
name: return-path
ready: true
resources:
limits:
memory: 32Mi
requests:
cpu: 5m
memory: 8Mi
restartCount: 0
started: true
state:
running:
startedAt: '2026-09-18T20:53:10Z'
user:
linux:
gid: 0
supplementalGroups:
- 0
uid: 0
hostIP: 172.29.21.217
hostIPs:
- ip: 172.29.21.217
phase: Running
podIP: 172.29.21.217
podIPs:
- ip: 172.29.21.217
qosClass: Burstable
resources:
limits:
memory: 32Mi
requests:
cpu: 5m
memory: 8Mi
startTime: '2026-09-18T20:53:06Z'