name: hubble-relay-b86d45476-7xjff
generateName: hubble-relay-b86d45476-
namespace: kube-system
uid: 674e4e9e-11d5-434c-bdea-b4ebdb84eebb
resourceVersion: '27462739'
creationTimestamp: '2024-09-19T22:00:29Z'
labels:
  app.kubernetes.io/name: hubble-relay
  app.kubernetes.io/part-of: cilium
  doks.digitalocean.com/managed: 'true'
  k8s-app: hubble-relay
  pod-template-hash: b86d45476
annotations:
  cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
  clusterlint.digitalocean.com/disabled-checks: resource-requirements
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: hubble-relay-b86d45476
    uid: c6a339c6-0fd0-4e16-88d1-d20459930d4b
    controller: true
    blockOwnerDeletion: true

- name: hubble-relay
  image: >-
    quay.io/cilium/hubble-relay:v1.14.10@sha256:c156c4fc2da520d2876142ea17490440b95431a1be755d2050e72115a495cfd0
  command:
    - hubble-relay
  args:
    - serve
  ports:
    - name: grpc
      containerPort: 4245
      protocol: TCP
  resources: {}
  volumeMounts:
    - name: config
      readOnly: true
      mountPath: /etc/hubble-relay
    - name: tls
      readOnly: true
      mountPath: /var/lib/hubble-relay/tls
  livenessProbe:
    tcpSocket:
      port: grpc
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  readinessProbe:
    tcpSocket:
      port: grpc
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: FallbackToLogsOnError
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      drop:
        - ALL
    runAsUser: 65532
    runAsGroup: 65532
    runAsNonRoot: true

volumes:
  - name: config
    configMap:
      name: hubble-relay-config
      items:
        - key: config.yaml
          path: config.yaml
      defaultMode: 420
  - name: tls
    projected:
      sources:
        - secret:
            name: hubble-relay-client-certs
            items:
              - key: tls.crt
                path: client.crt
              - key: tls.key
                path: client.key
              - key: ca.crt
                path: hubble-server-ca.crt
      defaultMode: 256
containers:
  - name: hubble-relay
    image: >-
      quay.io/cilium/hubble-relay:v1.14.10@sha256:c156c4fc2da520d2876142ea17490440b95431a1be755d2050e72115a495cfd0
    command:
      - hubble-relay
    args:
      - serve
    ports:
      - name: grpc
        containerPort: 4245
        protocol: TCP
    resources: {}
    volumeMounts:
      - name: config
        readOnly: true
        mountPath: /etc/hubble-relay
      - name: tls
        readOnly: true
        mountPath: /var/lib/hubble-relay/tls
    livenessProbe:
      tcpSocket:
        port: grpc
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    readinessProbe:
      tcpSocket:
        port: grpc
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        drop:
          - ALL
      runAsUser: 65532
      runAsGroup: 65532
      runAsNonRoot: true
restartPolicy: Always
terminationGracePeriodSeconds: 1
dnsPolicy: ClusterFirst
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: hubble-relay
serviceAccount: hubble-relay
automountServiceAccountToken: false
nodeName: system-0-r5hb1
securityContext:
  fsGroup: 65532
affinity:
  nodeAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
      - weight: 100
        preference:
          matchExpressions:
            - key: doks.digitalocean.com/gpu-brand
              operator: DoesNotExist
  podAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      - labelSelector:
          matchLabels:
            k8s-app: cilium
        topologyKey: kubernetes.io/hostname
schedulerName: default-scheduler
tolerations:
  - key: nvidia.com/gpu
    operator: Exists
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priority: 0
enableServiceLinks: true
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-09-19T22:00:29Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-09-19T22:00:30Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-09-19T22:00:30Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-09-19T22:00:29Z'
hostIP: 10.108.0.3
podIP: 10.244.0.28
podIPs:
  - ip: 10.244.0.28
startTime: '2024-09-19T22:00:29Z'
containerStatuses:
  - name: hubble-relay
    state:
      running:
        startedAt: '2024-09-19T22:00:30Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: sha256:c1c3c23052b596a196bafdde792de08748eb9d634c3a9fd75f3d8264d8b7ced9
    imageID: >-
      quay.io/cilium/hubble-relay@sha256:c156c4fc2da520d2876142ea17490440b95431a1be755d2050e72115a495cfd0
    containerID: >-
      containerd://c60c5a91ab446e48daa568a5c3cc472663b9f97acea54f4d5577b436df146d5f
    started: true
qosClass: BestEffort

metadata:
  name: hubble-relay-b86d45476-7xjff
  generateName: hubble-relay-b86d45476-
  namespace: kube-system
  uid: 674e4e9e-11d5-434c-bdea-b4ebdb84eebb
  resourceVersion: '27462739'
  creationTimestamp: '2024-09-19T22:00:29Z'
  labels:
    app.kubernetes.io/name: hubble-relay
    app.kubernetes.io/part-of: cilium
    doks.digitalocean.com/managed: 'true'
    k8s-app: hubble-relay
    pod-template-hash: b86d45476
  annotations:
    cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
    clusterlint.digitalocean.com/disabled-checks: resource-requirements
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: hubble-relay-b86d45476
      uid: c6a339c6-0fd0-4e16-88d1-d20459930d4b
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: config
      configMap:
        name: hubble-relay-config
        items:
          - key: config.yaml
            path: config.yaml
        defaultMode: 420
    - name: tls
      projected:
        sources:
          - secret:
              name: hubble-relay-client-certs
              items:
                - key: tls.crt
                  path: client.crt
                - key: tls.key
                  path: client.key
                - key: ca.crt
                  path: hubble-server-ca.crt
        defaultMode: 256
  containers:
    - name: hubble-relay
      image: >-
        quay.io/cilium/hubble-relay:v1.14.10@sha256:c156c4fc2da520d2876142ea17490440b95431a1be755d2050e72115a495cfd0
      command:
        - hubble-relay
      args:
        - serve
      ports:
        - name: grpc
          containerPort: 4245
          protocol: TCP
      resources: {}
      volumeMounts:
        - name: config
          readOnly: true
          mountPath: /etc/hubble-relay
        - name: tls
          readOnly: true
          mountPath: /var/lib/hubble-relay/tls
      livenessProbe:
        tcpSocket:
          port: grpc
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      readinessProbe:
        tcpSocket:
          port: grpc
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          drop:
            - ALL
        runAsUser: 65532
        runAsGroup: 65532
        runAsNonRoot: true
  restartPolicy: Always
  terminationGracePeriodSeconds: 1
  dnsPolicy: ClusterFirst
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: hubble-relay
  serviceAccount: hubble-relay
  automountServiceAccountToken: false
  nodeName: system-0-r5hb1
  securityContext:
    fsGroup: 65532
  affinity:
    nodeAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
        - weight: 100
          preference:
            matchExpressions:
              - key: doks.digitalocean.com/gpu-brand
                operator: DoesNotExist
    podAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchLabels:
              k8s-app: cilium
          topologyKey: kubernetes.io/hostname
  schedulerName: default-scheduler
  tolerations:
    - key: nvidia.com/gpu
      operator: Exists
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priority: 0
  enableServiceLinks: true
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-09-19T22:00:29Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-09-19T22:00:30Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-09-19T22:00:30Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-09-19T22:00:29Z'
  hostIP: 10.108.0.3
  podIP: 10.244.0.28
  podIPs:
    - ip: 10.244.0.28
  startTime: '2024-09-19T22:00:29Z'
  containerStatuses:
    - name: hubble-relay
      state:
        running:
          startedAt: '2024-09-19T22:00:30Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: sha256:c1c3c23052b596a196bafdde792de08748eb9d634c3a9fd75f3d8264d8b7ced9
      imageID: >-
        quay.io/cilium/hubble-relay@sha256:c156c4fc2da520d2876142ea17490440b95431a1be755d2050e72115a495cfd0
      containerID: >-
        containerd://c60c5a91ab446e48daa568a5c3cc472663b9f97acea54f4d5577b436df146d5f
      started: true
  qosClass: BestEffort