name: cpc-bridge-proxy-zr56c
generateName: cpc-bridge-proxy-
namespace: kube-system
uid: d801b3c0-a3ff-4c90-a9f8-c52b15df25c9
resourceVersion: '34197327'
creationTimestamp: '2024-07-30T05:04:19Z'
labels:
  app: cpc-bridge-proxy
  controller-revision-hash: 649d67bdbb
  doks.digitalocean.com/managed: 'true'
  pod-template-generation: '1'
annotations:
  clusterlint.digitalocean.com/disabled-checks: resource-requirements
ownerReferences:
  - apiVersion: apps/v1
    kind: DaemonSet
    name: cpc-bridge-proxy
    uid: 747d5aff-94db-4936-9871-b2d0a3f3b451
    controller: true
    blockOwnerDeletion: true

- name: cpc-bridge-proxy
  image: digitalocean/cpbridge:1.25.1
  resources:
    requests:
      cpu: 100m
      memory: 75Mi
  volumeMounts:
    - name: cpc-bridge-proxy-config
      readOnly: true
      mountPath: /etc/nginx
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent

volumes:
  - name: cpc-bridge-proxy-config
    configMap:
      name: cpc-bridge-proxy-config
      defaultMode: 420
initContainers:
  - name: init-iptables
    image: digitalocean/cpbridge:1.25.1
    command:
      - /bin/bash
      - '-c'
      - >
        set -o errexit

        set -o pipefail

        set -o nounset

        ipt_nat="iptables-legacy -t nat"

        # Avoid racing with kube-proxy on the initial iptables rules population
        which makes the rule order indeterministic.

        until ${ipt_nat} --list KUBE-SERVICES > /dev/null; do echo "waiting for
        kube-proxy to populate iptables rules"; sleep 3; done

        ipt_output_args="OUTPUT -p tcp -d 10.245.0.1/32 --dport 443 -j DNAT
        --to-destination 100.65.14.98:16443"

        ipt_prerouting_args="PREROUTING -p tcp -d 100.65.14.98 --dport 443 -j
        DNAT --to-destination 100.65.14.98:16443"

        ${ipt_nat} --check ${ipt_output_args} || ${ipt_nat} --insert
        ${ipt_output_args}

        ${ipt_nat} --check ${ipt_prerouting_args} || ${ipt_nat} --insert
        ${ipt_prerouting_args}
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        add:
          - NET_ADMIN
containers:
  - name: cpc-bridge-proxy
    image: digitalocean/cpbridge:1.25.1
    resources:
      requests:
        cpu: 100m
        memory: 75Mi
    volumeMounts:
      - name: cpc-bridge-proxy-config
        readOnly: true
        mountPath: /etc/nginx
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
serviceAccountName: default
serviceAccount: default
automountServiceAccountToken: false
nodeName: system-0-bf7s0
hostNetwork: true
securityContext: {}
imagePullSecrets:
  - name: kubeintel
affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchFields:
            - key: metadata.name
              operator: In
              values:
                - system-0-bf7s0
schedulerName: default-scheduler
tolerations:
  - operator: Exists
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
  - key: node.kubernetes.io/disk-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/memory-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/pid-pressure
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/unschedulable
    operator: Exists
    effect: NoSchedule
  - key: node.kubernetes.io/network-unavailable
    operator: Exists
    effect: NoSchedule
priorityClassName: system-node-critical
priority: 2000001000
enableServiceLinks: true
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-30T05:04:35Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-30T05:04:36Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-30T05:04:36Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-30T05:04:19Z'
hostIP: 10.108.0.2
podIP: 10.108.0.2
podIPs:
  - ip: 10.108.0.2
startTime: '2024-07-30T05:04:20Z'
initContainerStatuses:
  - name: init-iptables
    state:
      terminated:
        exitCode: 0
        reason: Completed
        startedAt: '2024-07-30T05:04:34Z'
        finishedAt: '2024-07-30T05:04:34Z'
        containerID: >-
          containerd://d312f43665525117d7ae3adf284ea6f7487bac89705ea9ef1c71c4439cb05555
    lastState: {}
    ready: true
    restartCount: 0
    image: docker.io/digitalocean/cpbridge:1.25.1
    imageID: >-
      docker.io/digitalocean/cpbridge@sha256:bad0e515066cdaf5a1248761b0e47ffe44a878395534fe13dec2cd17624ab1cc
    containerID: >-
      containerd://d312f43665525117d7ae3adf284ea6f7487bac89705ea9ef1c71c4439cb05555
    started: false
containerStatuses:
  - name: cpc-bridge-proxy
    state:
      running:
        startedAt: '2024-07-30T05:04:35Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: docker.io/digitalocean/cpbridge:1.25.1
    imageID: >-
      docker.io/digitalocean/cpbridge@sha256:bad0e515066cdaf5a1248761b0e47ffe44a878395534fe13dec2cd17624ab1cc
    containerID: >-
      containerd://c28fa62ed2201a86421522aed1d8a1bf5e2ed3a5f1ba7c81288b70d3e432be66
    started: true
qosClass: Burstable

metadata:
  name: cpc-bridge-proxy-zr56c
  generateName: cpc-bridge-proxy-
  namespace: kube-system
  uid: d801b3c0-a3ff-4c90-a9f8-c52b15df25c9
  resourceVersion: '34197327'
  creationTimestamp: '2024-07-30T05:04:19Z'
  labels:
    app: cpc-bridge-proxy
    controller-revision-hash: 649d67bdbb
    doks.digitalocean.com/managed: 'true'
    pod-template-generation: '1'
  annotations:
    clusterlint.digitalocean.com/disabled-checks: resource-requirements
  ownerReferences:
    - apiVersion: apps/v1
      kind: DaemonSet
      name: cpc-bridge-proxy
      uid: 747d5aff-94db-4936-9871-b2d0a3f3b451
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: cpc-bridge-proxy-config
      configMap:
        name: cpc-bridge-proxy-config
        defaultMode: 420
  initContainers:
    - name: init-iptables
      image: digitalocean/cpbridge:1.25.1
      command:
        - /bin/bash
        - '-c'
        - >
          set -o errexit

          set -o pipefail

          set -o nounset

          ipt_nat="iptables-legacy -t nat"

          # Avoid racing with kube-proxy on the initial iptables rules
          population which makes the rule order indeterministic.

          until ${ipt_nat} --list KUBE-SERVICES > /dev/null; do echo "waiting
          for kube-proxy to populate iptables rules"; sleep 3; done

          ipt_output_args="OUTPUT -p tcp -d 10.245.0.1/32 --dport 443 -j DNAT
          --to-destination 100.65.14.98:16443"

          ipt_prerouting_args="PREROUTING -p tcp -d 100.65.14.98 --dport 443 -j
          DNAT --to-destination 100.65.14.98:16443"

          ${ipt_nat} --check ${ipt_output_args} || ${ipt_nat} --insert
          ${ipt_output_args}

          ${ipt_nat} --check ${ipt_prerouting_args} || ${ipt_nat} --insert
          ${ipt_prerouting_args}
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          add:
            - NET_ADMIN
  containers:
    - name: cpc-bridge-proxy
      image: digitalocean/cpbridge:1.25.1
      resources:
        requests:
          cpu: 100m
          memory: 75Mi
      volumeMounts:
        - name: cpc-bridge-proxy-config
          readOnly: true
          mountPath: /etc/nginx
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  serviceAccountName: default
  serviceAccount: default
  automountServiceAccountToken: false
  nodeName: system-0-bf7s0
  hostNetwork: true
  securityContext: {}
  imagePullSecrets:
    - name: kubeintel
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
          - matchFields:
              - key: metadata.name
                operator: In
                values:
                  - system-0-bf7s0
  schedulerName: default-scheduler
  tolerations:
    - operator: Exists
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
    - key: node.kubernetes.io/disk-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/memory-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/pid-pressure
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/unschedulable
      operator: Exists
      effect: NoSchedule
    - key: node.kubernetes.io/network-unavailable
      operator: Exists
      effect: NoSchedule
  priorityClassName: system-node-critical
  priority: 2000001000
  enableServiceLinks: true
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-30T05:04:35Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-30T05:04:36Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-30T05:04:36Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-30T05:04:19Z'
  hostIP: 10.108.0.2
  podIP: 10.108.0.2
  podIPs:
    - ip: 10.108.0.2
  startTime: '2024-07-30T05:04:20Z'
  initContainerStatuses:
    - name: init-iptables
      state:
        terminated:
          exitCode: 0
          reason: Completed
          startedAt: '2024-07-30T05:04:34Z'
          finishedAt: '2024-07-30T05:04:34Z'
          containerID: >-
            containerd://d312f43665525117d7ae3adf284ea6f7487bac89705ea9ef1c71c4439cb05555
      lastState: {}
      ready: true
      restartCount: 0
      image: docker.io/digitalocean/cpbridge:1.25.1
      imageID: >-
        docker.io/digitalocean/cpbridge@sha256:bad0e515066cdaf5a1248761b0e47ffe44a878395534fe13dec2cd17624ab1cc
      containerID: >-
        containerd://d312f43665525117d7ae3adf284ea6f7487bac89705ea9ef1c71c4439cb05555
      started: false
  containerStatuses:
    - name: cpc-bridge-proxy
      state:
        running:
          startedAt: '2024-07-30T05:04:35Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: docker.io/digitalocean/cpbridge:1.25.1
      imageID: >-
        docker.io/digitalocean/cpbridge@sha256:bad0e515066cdaf5a1248761b0e47ffe44a878395534fe13dec2cd17624ab1cc
      containerID: >-
        containerd://c28fa62ed2201a86421522aed1d8a1bf5e2ed3a5f1ba7c81288b70d3e432be66
      started: true
  qosClass: Burstable