kubelet-serving-cert-approver-6757b98b8-zlwj6 created 2026-09-18 20:54:08, version 836

affinity:
  nodeAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
    - preference:
        matchExpressions:
        - key: node-role.kubernetes.io/control-plane
          operator: DoesNotExist
      weight: 100
containers:
- args:
  - serve
  env:
  - name: NAMESPACE
    valueFrom:
      fieldRef:
        apiVersion: v1
        fieldPath: metadata.namespace
  image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.11.0
  imagePullPolicy: Always
  livenessProbe:
    failureThreshold: 3
    httpGet:
      path: /healthz
      port: health
      scheme: HTTP
    initialDelaySeconds: 6
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  name: cert-approver
  ports:
  - containerPort: 8080
    name: health
    protocol: TCP
  - containerPort: 9090
    name: metrics
    protocol: TCP
  readinessProbe:
    failureThreshold: 3
    httpGet:
      path: /readyz
      port: health
      scheme: HTTP
    initialDelaySeconds: 3
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  resources:
    limits:
      cpu: 250m
      memory: 32Mi
    requests:
      cpu: 10m
      memory: 16Mi
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
      - ALL
    privileged: false
    readOnlyRootFilesystem: true
    runAsNonRoot: true
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-cvzhv
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
nodeName: csfarm-worker-01
preemptionPolicy: PreemptLowerPriority
priority: 2000000000
priorityClassName: system-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  fsGroup: 65534
  runAsGroup: 65534
  runAsUser: 65534
  seccompProfile:
    type: RuntimeDefault
serviceAccount: kubelet-serving-cert-approver
serviceAccountName: kubelet-serving-cert-approver
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoSchedule
  key: node.cloudprovider.kubernetes.io/uninitialized
  operator: Exists
- effect: NoSchedule
  key: node-role.kubernetes.io/master
  operator: Exists
- effect: NoSchedule
  key: node-role.kubernetes.io/control-plane
  operator: Exists
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- name: kube-api-access-cvzhv
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

allocatedResources:
  cpu: 10m
  memory: 16Mi
conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:54:23Z'
  observedGeneration: 1
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:54:09Z'
  observedGeneration: 1
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:54:41Z'
  observedGeneration: 1
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:54:41Z'
  observedGeneration: 1
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-18T20:54:08Z'
  observedGeneration: 1
  status: 'True'
  type: PodScheduled
containerStatuses:
- allocatedResources:
    cpu: 10m
    memory: 16Mi
  containerID: containerd://8af8021c48d4b837f10f327fae5df29abcc1d4065fb793de76d81efd56773517
  image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.11.0
  imageID: ghcr.io/alex1989hu/kubelet-serving-cert-approver@sha256:f17017b53983fe93f5a07ef85b2e448b9e4be848d45f05c325c8f2c77e1171c4
  lastState: {}
  name: cert-approver
  ready: true
  resources:
    limits:
      cpu: 250m
      memory: 32Mi
    requests:
      cpu: 10m
      memory: 16Mi
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-18T20:54:31Z'
  user:
    linux:
      gid: 65534
      supplementalGroups:
      - 65534
      uid: 65534
  volumeMounts:
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-cvzhv
    readOnly: true
    recursiveReadOnly: Disabled
hostIP: 172.29.21.208
hostIPs:
- ip: 172.29.21.208
observedGeneration: 1
phase: Running
podIP: 10.244.0.2
podIPs:
- ip: 10.244.0.2
qosClass: Burstable
resources:
  limits:
    cpu: 250m
    memory: 32Mi
  requests:
    memory: 16Mi
startTime: '2026-09-18T20:54:09Z'