name: cert-manager-cainjector-7666685ff5-7vpqk
generateName: cert-manager-cainjector-7666685ff5-
namespace: cert-manager
uid: a91a2017-a9cb-4075-a8df-e1212b524aab
resourceVersion: '92139844'
creationTimestamp: '2025-04-17T22:04:41Z'
labels:
  app: cainjector
  app.kubernetes.io/component: cainjector
  app.kubernetes.io/instance: cert-manager
  app.kubernetes.io/name: cainjector
  app.kubernetes.io/version: v1.15.1
  pod-template-hash: 7666685ff5
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: cert-manager-cainjector-7666685ff5
    uid: 9595dc91-60f2-42f3-a43b-021825a422dc
    controller: true
    blockOwnerDeletion: true

- name: cert-manager-cainjector
  image: quay.io/jetstack/cert-manager-cainjector:v1.15.1
  args:
    - '--v=2'
    - '--leader-election-namespace=kube-system'
  env:
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
  resources: {}
  volumeMounts:
    - name: kube-api-access-ml854
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      drop:
        - ALL
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false

volumes:
  - name: kube-api-access-ml854
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
containers:
  - name: cert-manager-cainjector
    image: quay.io/jetstack/cert-manager-cainjector:v1.15.1
    args:
      - '--v=2'
      - '--leader-election-namespace=kube-system'
    env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
    resources: {}
    volumeMounts:
      - name: kube-api-access-ml854
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: cert-manager-cainjector
serviceAccount: cert-manager-cainjector
nodeName: system-0-65529
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priority: 0
enableServiceLinks: false
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: PodReadyToStartContainers
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:41Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:41Z'
hostIP: 10.108.0.3
podIP: 10.244.1.45
podIPs:
  - ip: 10.244.1.45
startTime: '2025-04-17T22:04:41Z'
containerStatuses:
  - name: cert-manager-cainjector
    state:
      running:
        startedAt: '2025-04-17T22:04:53Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: quay.io/jetstack/cert-manager-cainjector:v1.15.1
    imageID: >-
      quay.io/jetstack/cert-manager-cainjector@sha256:b92862b0fdeea5cc9ebcbdd77d604cb17091c66f101cfcbb340a9e21b0d2c687
    containerID: >-
      containerd://a6187b63cf94c53b88f2b08b48748fdf2859c29ea3ed9ec652bca319f0d93736
    started: true
qosClass: BestEffort

metadata:
  name: cert-manager-cainjector-7666685ff5-7vpqk
  generateName: cert-manager-cainjector-7666685ff5-
  namespace: cert-manager
  uid: a91a2017-a9cb-4075-a8df-e1212b524aab
  resourceVersion: '92139844'
  creationTimestamp: '2025-04-17T22:04:41Z'
  labels:
    app: cainjector
    app.kubernetes.io/component: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/version: v1.15.1
    pod-template-hash: 7666685ff5
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: cert-manager-cainjector-7666685ff5
      uid: 9595dc91-60f2-42f3-a43b-021825a422dc
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: kube-api-access-ml854
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  containers:
    - name: cert-manager-cainjector
      image: quay.io/jetstack/cert-manager-cainjector:v1.15.1
      args:
        - '--v=2'
        - '--leader-election-namespace=kube-system'
      env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
      resources: {}
      volumeMounts:
        - name: kube-api-access-ml854
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          drop:
            - ALL
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: cert-manager-cainjector
  serviceAccount: cert-manager-cainjector
  nodeName: system-0-65529
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priority: 0
  enableServiceLinks: false
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:41Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:41Z'
  hostIP: 10.108.0.3
  podIP: 10.244.1.45
  podIPs:
    - ip: 10.244.1.45
  startTime: '2025-04-17T22:04:41Z'
  containerStatuses:
    - name: cert-manager-cainjector
      state:
        running:
          startedAt: '2025-04-17T22:04:53Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: quay.io/jetstack/cert-manager-cainjector:v1.15.1
      imageID: >-
        quay.io/jetstack/cert-manager-cainjector@sha256:b92862b0fdeea5cc9ebcbdd77d604cb17091c66f101cfcbb340a9e21b0d2c687
      containerID: >-
        containerd://a6187b63cf94c53b88f2b08b48748fdf2859c29ea3ed9ec652bca319f0d93736
      started: true
  qosClass: BestEffort