name: ingress-nginx-controller-2ftd7
generateName: ingress-nginx-controller-
namespace: ingress-nginx
uid: dbe8090d-3298-406b-912e-b391b49301b9
resourceVersion: '92139781'
creationTimestamp: '2025-04-17T22:04:27Z'
labels:
  app.kubernetes.io/component: controller
  app.kubernetes.io/instance: ingress-nginx
  app.kubernetes.io/managed-by: Helm
  app.kubernetes.io/name: ingress-nginx
  app.kubernetes.io/part-of: ingress-nginx
  app.kubernetes.io/version: 1.10.1
  controller-revision-hash: d576844c6
  helm.sh/chart: ingress-nginx-4.10.1
  pod-template-generation: '1'
ownerReferences:
  - apiVersion: apps/v1
    kind: DaemonSet
    name: ingress-nginx-controller
    uid: 0a0dfb3e-4b46-4bcd-a8ce-c212748f68ba
    controller: true
    blockOwnerDeletion: true

- name: controller
  image: >-
    registry.k8s.io/ingress-nginx/controller:v1.10.1@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
  args:
    - /nginx-ingress-controller
    - '--publish-service=$(POD_NAMESPACE)/ingress-nginx-controller'
    - '--election-id=ingress-nginx-leader'
    - '--controller-class=k8s.io/ingress-nginx'
    - '--ingress-class=nginx'
    - '--configmap=$(POD_NAMESPACE)/ingress-nginx-controller'
    - '--validating-webhook=:8443'
    - '--validating-webhook-certificate=/usr/local/certificates/cert'
    - '--validating-webhook-key=/usr/local/certificates/key'
    - '--enable-metrics=false'
  ports:
    - name: http
      hostPort: 80
      containerPort: 80
      protocol: TCP
    - name: https
      hostPort: 443
      containerPort: 443
      protocol: TCP
    - name: webhook
      hostPort: 8443
      containerPort: 8443
      protocol: TCP
  env:
    - name: POD_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.name
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: LD_PRELOAD
      value: /usr/local/lib/libmimalloc.so
  resources:
    requests:
      cpu: 100m
      memory: 90Mi
  volumeMounts:
    - name: webhook-cert
      readOnly: true
      mountPath: /usr/local/certificates/
    - name: kube-api-access-vvjnr
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  livenessProbe:
    httpGet:
      path: /healthz
      port: 10254
      scheme: HTTP
    initialDelaySeconds: 10
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 5
  readinessProbe:
    httpGet:
      path: /healthz
      port: 10254
      scheme: HTTP
    initialDelaySeconds: 10
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  lifecycle:
    preStop:
      exec:
        command:
          - /wait-shutdown
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      add:
        - NET_BIND_SERVICE
      drop:
        - ALL
    runAsUser: 101
    runAsNonRoot: true
    readOnlyRootFilesystem: false
    allowPrivilegeEscalation: false
    seccompProfile:
      type: RuntimeDefault

volumes:
  - name: webhook-cert
    secret:
      secretName: ingress-nginx-admission
      defaultMode: 420
  - name: kube-api-access-vvjnr
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
containers:
  - name: controller
    image: >-
      registry.k8s.io/ingress-nginx/controller:v1.10.1@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
    args:
      - /nginx-ingress-controller
      - '--publish-service=$(POD_NAMESPACE)/ingress-nginx-controller'
      - '--election-id=ingress-nginx-leader'
      - '--controller-class=k8s.io/ingress-nginx'
      - '--ingress-class=nginx'
      - '--configmap=$(POD_NAMESPACE)/ingress-nginx-controller'
      - '--validating-webhook=:8443'
      - '--validating-webhook-certificate=/usr/local/certificates/cert'
      - '--validating-webhook-key=/usr/local/certificates/key'
      - '--enable-metrics=false'
    ports:
      - name: http
        hostPort: 80
        containerPort: 80
        protocol: TCP
      - name: https
        hostPort: 443
        containerPort: 443
        protocol: TCP
      - name: webhook
        hostPort: 8443
        containerPort: 8443
        protocol: TCP
    env:
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: LD_PRELOAD
        value: /usr/local/lib/libmimalloc.so
    resources:
      requests:
        cpu: 100m
        memory: 90Mi
    volumeMounts:
      - name: webhook-cert
        readOnly: true
        mountPath: /usr/local/certificates/
      - name: kube-api-access-vvjnr
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    livenessProbe:
      httpGet:
        path: /healthz
        port: 10254
        scheme: HTTP
      initialDelaySeconds: 10
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 5
    readinessProbe:
      httpGet:
        path: /healthz
        port: 10254
        scheme: HTTP
      initialDelaySeconds: 10
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    lifecycle:
      preStop:
        exec:
          command:
            - /wait-shutdown
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        add:
          - NET_BIND_SERVICE
        drop:
          - ALL
      runAsUser: 101
      runAsNonRoot: true
      readOnlyRootFilesystem: false
      allowPrivilegeEscalation: false
      seccompProfile:
        type: RuntimeDefault
restartPolicy: Always
terminationGracePeriodSeconds: 300
dnsPolicy: ClusterFirstWithHostNet
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: ingress-nginx
serviceAccount: ingress-nginx
nodeName: system-0-65529
hostNetwork: true
securityContext: {}
affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchFields:
            - key: metadata.name
              operator: In
              values:
                - system-0-65529
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
  - key: node.kubernetes.io/disk-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/memory-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/pid-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/unschedulable
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/network-unavailable
    operator: Exists
    effect: NoSchedule
priority: 0
enableServiceLinks: true
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: PodReadyToStartContainers
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:34Z'
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:27Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:47Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:47Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:27Z'
hostIP: 10.108.0.3
podIP: 10.108.0.3
podIPs:
  - ip: 10.108.0.3
startTime: '2025-04-17T22:04:27Z'
containerStatuses:
  - name: controller
    state:
      running:
        startedAt: '2025-04-17T22:04:33Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: sha256:ee54966f3891d75b255d160236368a4f9d3b588d32fb44bd04aea5101143e829
    imageID: >-
      registry.k8s.io/ingress-nginx/controller@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
    containerID: >-
      containerd://09677f2abde889cfc5725a3aed2bea960e8c087447a6cdf978bcbbac9db13ac7
    started: true
qosClass: Burstable

metadata:
  name: ingress-nginx-controller-2ftd7
  generateName: ingress-nginx-controller-
  namespace: ingress-nginx
  uid: dbe8090d-3298-406b-912e-b391b49301b9
  resourceVersion: '92139781'
  creationTimestamp: '2025-04-17T22:04:27Z'
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: ingress-nginx
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
    app.kubernetes.io/version: 1.10.1
    controller-revision-hash: d576844c6
    helm.sh/chart: ingress-nginx-4.10.1
    pod-template-generation: '1'
  ownerReferences:
    - apiVersion: apps/v1
      kind: DaemonSet
      name: ingress-nginx-controller
      uid: 0a0dfb3e-4b46-4bcd-a8ce-c212748f68ba
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: webhook-cert
      secret:
        secretName: ingress-nginx-admission
        defaultMode: 420
    - name: kube-api-access-vvjnr
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  containers:
    - name: controller
      image: >-
        registry.k8s.io/ingress-nginx/controller:v1.10.1@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
      args:
        - /nginx-ingress-controller
        - '--publish-service=$(POD_NAMESPACE)/ingress-nginx-controller'
        - '--election-id=ingress-nginx-leader'
        - '--controller-class=k8s.io/ingress-nginx'
        - '--ingress-class=nginx'
        - '--configmap=$(POD_NAMESPACE)/ingress-nginx-controller'
        - '--validating-webhook=:8443'
        - '--validating-webhook-certificate=/usr/local/certificates/cert'
        - '--validating-webhook-key=/usr/local/certificates/key'
        - '--enable-metrics=false'
      ports:
        - name: http
          hostPort: 80
          containerPort: 80
          protocol: TCP
        - name: https
          hostPort: 443
          containerPort: 443
          protocol: TCP
        - name: webhook
          hostPort: 8443
          containerPort: 8443
          protocol: TCP
      env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
      resources:
        requests:
          cpu: 100m
          memory: 90Mi
      volumeMounts:
        - name: webhook-cert
          readOnly: true
          mountPath: /usr/local/certificates/
        - name: kube-api-access-vvjnr
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      livenessProbe:
        httpGet:
          path: /healthz
          port: 10254
          scheme: HTTP
        initialDelaySeconds: 10
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 5
      readinessProbe:
        httpGet:
          path: /healthz
          port: 10254
          scheme: HTTP
        initialDelaySeconds: 10
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      lifecycle:
        preStop:
          exec:
            command:
              - /wait-shutdown
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          add:
            - NET_BIND_SERVICE
          drop:
            - ALL
        runAsUser: 101
        runAsNonRoot: true
        readOnlyRootFilesystem: false
        allowPrivilegeEscalation: false
        seccompProfile:
          type: RuntimeDefault
  restartPolicy: Always
  terminationGracePeriodSeconds: 300
  dnsPolicy: ClusterFirstWithHostNet
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: ingress-nginx
  serviceAccount: ingress-nginx
  nodeName: system-0-65529
  hostNetwork: true
  securityContext: {}
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
          - matchFields:
              - key: metadata.name
                operator: In
                values:
                  - system-0-65529
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
    - key: node.kubernetes.io/disk-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/memory-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/pid-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/unschedulable
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/network-unavailable
      operator: Exists
      effect: NoSchedule
  priority: 0
  enableServiceLinks: true
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:34Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:27Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:47Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:47Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:27Z'
  hostIP: 10.108.0.3
  podIP: 10.108.0.3
  podIPs:
    - ip: 10.108.0.3
  startTime: '2025-04-17T22:04:27Z'
  containerStatuses:
    - name: controller
      state:
        running:
          startedAt: '2025-04-17T22:04:33Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: sha256:ee54966f3891d75b255d160236368a4f9d3b588d32fb44bd04aea5101143e829
      imageID: >-
        registry.k8s.io/ingress-nginx/controller@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
      containerID: >-
        containerd://09677f2abde889cfc5725a3aed2bea960e8c087447a6cdf978bcbbac9db13ac7
      started: true
  qosClass: Burstable