sealed-secrets-controller-8b5ffdf69-d8b5t created 2026-09-19 17:12:31, version 175571

containers:
- args:
  - --update-status
  - --key-prefix
  - sealed-secrets-key
  - --listen-addr
  - :8080
  - --listen-metrics-addr
  - :8081
  command:
  - controller
  image: docker.io/bitnami/sealed-secrets-controller:0.40.0
  imagePullPolicy: IfNotPresent
  livenessProbe:
    failureThreshold: 3
    httpGet:
      path: /healthz
      port: http
      scheme: HTTP
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  name: controller
  ports:
  - containerPort: 8080
    name: http
    protocol: TCP
  - containerPort: 8081
    name: metrics
    protocol: TCP
  readinessProbe:
    failureThreshold: 3
    httpGet:
      path: /healthz
      port: http
      scheme: HTTP
    periodSeconds: 10
    successThreshold: 1
    timeoutSeconds: 1
  resources: {}
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
    runAsNonRoot: true
    runAsUser: 1001
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  volumeMounts:
  - mountPath: /tmp
    name: tmp
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-vfjbq
    readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
nodeName: csfarm-worker-02
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  fsGroup: 65534
  seccompProfile:
    type: RuntimeDefault
serviceAccount: sealed-secrets-controller
serviceAccountName: sealed-secrets-controller
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
  key: node.kubernetes.io/not-ready
  operator: Exists
  tolerationSeconds: 300
- effect: NoExecute
  key: node.kubernetes.io/unreachable
  operator: Exists
  tolerationSeconds: 300
volumes:
- emptyDir: {}
  name: tmp
- name: kube-api-access-vfjbq
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        expirationSeconds: 3607
        path: token
    - configMap:
        items:
        - key: ca.crt
          path: ca.crt
        name: kube-root-ca.crt
    - downwardAPI:
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
          path: namespace

conditions:
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:12:32Z'
  observedGeneration: 1
  status: 'True'
  type: PodReadyToStartContainers
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:12:31Z'
  observedGeneration: 1
  status: 'True'
  type: Initialized
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:12:47Z'
  observedGeneration: 1
  status: 'True'
  type: Ready
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:12:47Z'
  observedGeneration: 1
  status: 'True'
  type: ContainersReady
- lastProbeTime: null
  lastTransitionTime: '2026-09-19T17:12:31Z'
  observedGeneration: 1
  status: 'True'
  type: PodScheduled
containerStatuses:
- containerID: containerd://3ea0520d649823f4c04908e966fd2f21434156fb3e87dfe1cbd5eb5f04baf9b0
  image: docker.io/bitnami/sealed-secrets-controller:0.40.0
  imageID: docker.io/bitnami/sealed-secrets-controller@sha256:b1ff382e9300dc9e74991f3177b18cafc06ce43b5c21349c86adbdd1d1c177d3
  lastState: {}
  name: controller
  ready: true
  resources: {}
  restartCount: 0
  started: true
  state:
    running:
      startedAt: '2026-09-19T17:12:36Z'
  user:
    linux:
      gid: 0
      supplementalGroups:
      - 0
      - 65534
      uid: 1001
  volumeMounts:
  - mountPath: /tmp
    name: tmp
  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    name: kube-api-access-vfjbq
    readOnly: true
    recursiveReadOnly: Disabled
hostIP: 172.29.21.249
hostIPs:
- ip: 172.29.21.249
observedGeneration: 1
phase: Running
podIP: 10.244.1.6
podIPs:
- ip: 10.244.1.6
qosClass: BestEffort
resources: {}
startTime: '2026-09-19T17:12:31Z'