sealed-secrets-controller created 2026-09-19 17:12:31, version 175577

deployment.kubernetes.io/revision: 1 meta.helm.sh/release-name: sealed-secrets meta.helm.sh/release-namespace: sealed-secrets

Spec

progressDeadlineSeconds: 600
replicas: 1
revisionHistoryLimit: 10
selector:
  matchLabels:
    app.kubernetes.io/instance: sealed-secrets
    app.kubernetes.io/name: sealed-secrets
strategy:
  rollingUpdate:
    maxSurge: 25%
    maxUnavailable: 25%
  type: RollingUpdate
template:
  metadata:
    labels:
      app.kubernetes.io/instance: sealed-secrets
      app.kubernetes.io/name: sealed-secrets
  spec:
    containers:
    - args:
      - --update-status
      - --key-prefix
      - sealed-secrets-key
      - --listen-addr
      - :8080
      - --listen-metrics-addr
      - :8081
      command:
      - controller
      image: docker.io/bitnami/sealed-secrets-controller:0.40.0
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: http
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: controller
      ports:
      - containerPort: 8080
        name: http
        protocol: TCP
      - containerPort: 8081
        name: metrics
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: http
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp
        name: tmp
    dnsPolicy: ClusterFirst
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 65534
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: sealed-secrets-controller
    serviceAccountName: sealed-secrets-controller
    terminationGracePeriodSeconds: 30
    volumes:
    - emptyDir: {}
      name: tmp

Status

availableReplicas: 1
conditions:
- lastTransitionTime: '2026-09-19T17:12:47Z'
  lastUpdateTime: '2026-09-19T17:12:47Z'
  message: Deployment has minimum availability.
  reason: MinimumReplicasAvailable
  status: 'True'
  type: Available
- lastTransitionTime: '2026-09-19T17:12:31Z'
  lastUpdateTime: '2026-09-19T17:12:47Z'
  message: ReplicaSet "sealed-secrets-controller-8b5ffdf69" has successfully progressed.
  reason: NewReplicaSetAvailable
  status: 'True'
  type: Progressing
observedGeneration: 1
readyReplicas: 1
replicas: 1
terminatingReplicas: 0
updatedReplicas: 1

Events

Type Reason Age From Message
No events found.