progressDeadlineSeconds: 600
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/instance: sealed-secrets
app.kubernetes.io/name: sealed-secrets
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/instance: sealed-secrets
app.kubernetes.io/name: sealed-secrets
spec:
containers:
- args:
- --update-status
- --key-prefix
- sealed-secrets-key
- --listen-addr
- :8080
- --listen-metrics-addr
- :8081
command:
- controller
image: docker.io/bitnami/sealed-secrets-controller:0.40.0
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: http
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 8080
name: http
protocol: TCP
- containerPort: 8081
name: metrics
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: http
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1001
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /tmp
name: tmp
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
fsGroup: 65534
seccompProfile:
type: RuntimeDefault
serviceAccount: sealed-secrets-controller
serviceAccountName: sealed-secrets-controller
terminationGracePeriodSeconds: 30
volumes:
- emptyDir: {}
name: tmp
sealed-secrets-controller
app.kubernetes.io/instance: sealed-secrets
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: sealed-secrets
app.kubernetes.io/part-of: sealed-secrets
app.kubernetes.io/version: 0.40.0
helm.sh/chart: sealed-secrets-2.20.0
deployment.kubernetes.io/revision: 1
meta.helm.sh/release-name: sealed-secrets
meta.helm.sh/release-namespace: sealed-secrets
Spec
Status
availableReplicas: 1
conditions:
- lastTransitionTime: '2026-09-19T17:12:47Z'
lastUpdateTime: '2026-09-19T17:12:47Z'
message: Deployment has minimum availability.
reason: MinimumReplicasAvailable
status: 'True'
type: Available
- lastTransitionTime: '2026-09-19T17:12:31Z'
lastUpdateTime: '2026-09-19T17:12:47Z'
message: ReplicaSet "sealed-secrets-controller-8b5ffdf69" has successfully progressed.
reason: NewReplicaSetAvailable
status: 'True'
type: Progressing
observedGeneration: 1
readyReplicas: 1
replicas: 1
terminatingReplicas: 0
updatedReplicas: 1
Pods
| Name | Ready | Status | Restarts | Age | IP | Node | Nominated Node | Readiness Gates | Created |
|---|---|---|---|---|---|---|---|---|---|
| sealed-secrets-controller-8b5ffdf69-d8b5t | 1/1 | Running | 0 | 4h52m | 10.244.1.6 | csfarm-worker-02 | <none> | <none> | 2026-09-19 17:12:31 |
Events
| Type | Reason | Age | From | Message |
|---|---|---|---|---|
| No events found. | ||||