apiVersion: v1
kind: Pod
metadata:
  annotations:
    kubernetes.io/config.hash: cda9727c458c60ebc253d8f95d65d7e0
    kubernetes.io/config.mirror: cda9727c458c60ebc253d8f95d65d7e0
    kubernetes.io/config.seen: '2026-09-18T20:53:11.116705609Z'
    kubernetes.io/config.source: http
  creationTimestamp: '2026-09-18T20:54:20Z'
  generation: 1
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubernetes.io/config.hash: {}
          f:kubernetes.io/config.mirror: {}
          f:kubernetes.io/config.seen: {}
          f:kubernetes.io/config.source: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"9382c89a-ec06-4a0f-acbc-1793de31bda0"}: {}
      f:spec:
        f:containers:
          k:{"name":"return-path"}:
            .: {}
            f:command: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:name: {}
            f:resources:
              .: {}
              f:limits:
                .: {}
                f:memory: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:allowPrivilegeEscalation: {}
              f:capabilities:
                .: {}
                f:add: {}
                f:drop: {}
              f:readOnlyRootFilesystem: {}
              f:runAsGroup: {}
              f:runAsUser: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:hostNetwork: {}
        f:nodeName: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext: {}
        f:terminationGracePeriodSeconds: {}
        f:tolerations: {}
    manager: kubelet
    operation: Update
    time: '2026-09-18T20:54:20Z'
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:allocatedResources:
          .: {}
          f:cpu: {}
          f:memory: {}
        f:conditions:
          .: {}
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodReadyToStartContainers"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodScheduled"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:hostIPs: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"172.29.21.228"}:
            .: {}
            f:ip: {}
        f:resources:
          .: {}
          f:limits:
            .: {}
            f:memory: {}
          f:requests:
            .: {}
            f:cpu: {}
            f:memory: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    subresource: status
    time: '2026-09-18T20:54:20Z'
  name: taloscluster-proxmox-return-path-csfarm-controlplane-03
  namespace: kube-system
  ownerReferences:
  - apiVersion: v1
    controller: true
    kind: Node
    name: csfarm-controlplane-03
    uid: 9382c89a-ec06-4a0f-acbc-1793de31bda0
  resourceVersion: '623'
  uid: 9f4a485f-c84d-498f-afa4-6dce00868dc2
spec:
  containers:
  - command:
    - /bin/sh
    - -ec
    - "set -eu\nNFT=nft\n\nexternal_if=\nfor address_file in /sys/class/net/*/address;\
      \ do\n  if [ \"$(cat \"$address_file\")\" = \"02:1e:db:8d:ca:01\" ]; then\n\
      \    external_if=\"${address_file%/address}\"\n    external_if=\"${external_if##*/}\"\
      \n    break\n  fi\ndone\nif [ -z \"$external_if\" ]; then\n  echo \"external\
      \ interface with MAC 02:1e:db:8d:ca:01 was not found\" >&2\n  exit 1\nfi\n\n\
      cleanup() {\n  \"$NFT\" delete table ip taloscluster_return_path 2>/dev/null\
      \ || true\n}\ntrap cleanup EXIT\ncleanup\n\n\"$NFT\" -f - <<EOF\ntable ip taloscluster_return_path\
      \ {\n  chain prerouting {\n    type filter hook prerouting priority -160; policy\
      \ accept;\n    iifname \"$external_if\" ip daddr 141.142.36.0/24 ct direction\
      \ original ct mark set ct mark | 0x00002000\n    ct direction reply ct mark\
      \ & 0x00002000 != 0 meta mark set meta mark | 0x00002000\n  }\n}\nEOF\n\nwhile\
      \ \"$NFT\" list table ip taloscluster_return_path >/dev/null 2>&1; do\n  sleep\
      \ 30\ndone\nexit 1\n"
    image: registry.k8s.io/kube-proxy:v1.36.4
    imagePullPolicy: IfNotPresent
    name: return-path
    resources:
      limits:
        memory: 32Mi
      requests:
        cpu: 5m
        memory: 8Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        add:
        - NET_ADMIN
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsGroup: 0
      runAsUser: 0
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  hostNetwork: true
  nodeName: csfarm-controlplane-03
  preemptionPolicy: PreemptLowerPriority
  priority: 2000001000
  priorityClassName: system-node-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  terminationGracePeriodSeconds: 30
  tolerations:
  - operator: Exists
status:
  allocatedResources:
    cpu: 5m
    memory: 8Mi
  conditions:
  - lastProbeTime: null
    lastTransitionTime: '2026-09-18T20:53:12Z'
    status: 'True'
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: '2026-09-18T20:53:11Z'
    status: 'True'
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: '2026-09-18T20:53:14Z'
    status: 'True'
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: '2026-09-18T20:53:14Z'
    status: 'True'
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: '2026-09-18T20:53:11Z'
    status: 'True'
    type: PodScheduled
  containerStatuses:
  - allocatedResources:
      cpu: 5m
      memory: 8Mi
    containerID: containerd://bc1e26d478057356bb4db6ebdc4392b0191ed481c9ca622296ab8f72ae946175
    image: registry.k8s.io/kube-proxy:v1.36.4
    imageID: registry.k8s.io/kube-proxy@sha256:b33fcdd8319290736e566f5fc2225ca07d3c2dfc025fb006342791aa31be4603
    lastState: {}
    name: return-path
    ready: true
    resources:
      limits:
        memory: 32Mi
      requests:
        cpu: 5m
        memory: 8Mi
    restartCount: 0
    started: true
    state:
      running:
        startedAt: '2026-09-18T20:53:14Z'
    user:
      linux:
        gid: 0
        supplementalGroups:
        - 0
        uid: 0
  hostIP: 172.29.21.228
  hostIPs:
  - ip: 172.29.21.228
  phase: Running
  podIP: 172.29.21.228
  podIPs:
  - ip: 172.29.21.228
  qosClass: Burstable
  resources:
    limits:
      memory: 32Mi
    requests:
      cpu: 5m
      memory: 8Mi
  startTime: '2026-09-18T20:53:11Z'