sealed-secrets-controller-8b5ffdf69 created 2026-09-19 17:12:31, version 175572

replicas: 1
selector:
  matchLabels:
    app.kubernetes.io/instance: sealed-secrets
    app.kubernetes.io/name: sealed-secrets
    pod-template-hash: 8b5ffdf69
template:
  metadata:
    labels:
      app.kubernetes.io/instance: sealed-secrets
      app.kubernetes.io/name: sealed-secrets
      pod-template-hash: 8b5ffdf69
  spec:
    containers:
    - args:
      - --update-status
      - --key-prefix
      - sealed-secrets-key
      - --listen-addr
      - :8080
      - --listen-metrics-addr
      - :8081
      command:
      - controller
      image: docker.io/bitnami/sealed-secrets-controller:0.40.0
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: http
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: controller
      ports:
      - containerPort: 8080
        name: http
        protocol: TCP
      - containerPort: 8081
        name: metrics
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: http
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp
        name: tmp
    dnsPolicy: ClusterFirst
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 65534
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: sealed-secrets-controller
    serviceAccountName: sealed-secrets-controller
    terminationGracePeriodSeconds: 30
    volumes:
    - emptyDir: {}
      name: tmp

availableReplicas: 1
fullyLabeledReplicas: 1
observedGeneration: 1
readyReplicas: 1
replicas: 1
terminatingReplicas: 0