containers:
- args:
- --port=9120
- --log-level=info
- --webhook-mode=enabled
env:
- name: METALLB_POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: METALLB_ML_SECRET_NAME
value: metallb-memberlist
- name: METALLB_DEPLOYMENT
value: metallb-controller
image: quay.io/metallb/controller:v0.16.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 17472
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 9120
name: metricshttps
protocol: TCP
- containerPort: 9443
name: webhook-server
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: 17472
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /tmp/k8s-webhook-server/serving-certs
name: cert
readOnly: true
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-52zvc
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
nodeName: csfarm-worker-02
nodeSelector:
kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
fsGroup: 65534
runAsNonRoot: true
runAsUser: 65534
serviceAccount: metallb-controller
serviceAccountName: metallb-controller
terminationGracePeriodSeconds: 0
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- name: cert
secret:
defaultMode: 420
secretName: metallb-webhook-cert
- name: kube-api-access-52zvc
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
metallb-controller-75f6b7f996-dnpnz
app.kubernetes.io/component: controller
app.kubernetes.io/instance: metallb
app.kubernetes.io/name: metallb
pod-template-hash: 75f6b7f996
Spec
Status
conditions:
- lastProbeTime: null
lastTransitionTime: '2026-09-19T17:01:28Z'
observedGeneration: 1
status: 'True'
type: PodReadyToStartContainers
- lastProbeTime: null
lastTransitionTime: '2026-09-19T17:01:27Z'
observedGeneration: 1
status: 'True'
type: Initialized
- lastProbeTime: null
lastTransitionTime: '2026-09-19T17:01:39Z'
observedGeneration: 1
status: 'True'
type: Ready
- lastProbeTime: null
lastTransitionTime: '2026-09-19T17:01:39Z'
observedGeneration: 1
status: 'True'
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: '2026-09-19T17:01:27Z'
observedGeneration: 1
status: 'True'
type: PodScheduled
containerStatuses:
- containerID: containerd://110dacf553ea9446fd2b5a24f663ce038c532cb4ac48307cf68064a5ab67273f
image: quay.io/metallb/controller:v0.16.1
imageID: quay.io/metallb/controller@sha256:f51ab515de9ccd20dc3dccb093e48df8adddac019326c456f449e55ba91b6420
lastState: {}
name: controller
ready: true
resources: {}
restartCount: 0
started: true
state:
running:
startedAt: '2026-09-19T17:01:29Z'
user:
linux:
gid: 65534
supplementalGroups:
- 65534
uid: 65534
volumeMounts:
- mountPath: /tmp/k8s-webhook-server/serving-certs
name: cert
readOnly: true
recursiveReadOnly: Disabled
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-52zvc
readOnly: true
recursiveReadOnly: Disabled
hostIP: 172.29.21.249
hostIPs:
- ip: 172.29.21.249
observedGeneration: 1
phase: Running
podIP: 10.244.1.4
podIPs:
- ip: 10.244.1.4
qosClass: BestEffort
resources: {}
startTime: '2026-09-19T17:01:27Z'
Events
| Type | Reason | Age | From | Message |
|---|---|---|---|---|
| No events found. | ||||