name: metrics-server-6d94bc8694-jjtwg
generateName: metrics-server-6d94bc8694-
namespace: kube-system
uid: d35215df-9205-4f2c-871d-a3ea397a3bbf
resourceVersion: '27462770'
creationTimestamp: '2024-07-23T04:47:22Z'
labels:
  k8s-app: metrics-server
  pod-template-hash: 6d94bc8694
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: metrics-server-6d94bc8694
    uid: 6ee99e26-f1b7-46a0-bdc3-03b5e015d159
    controller: true
    blockOwnerDeletion: true

- name: metrics-server
  image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
  args:
    - '--cert-dir=/tmp'
    - '--secure-port=10250'
    - '--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname'
    - '--kubelet-use-node-status-port'
    - '--metric-resolution=15s'
  ports:
    - name: https
      containerPort: 10250
      protocol: TCP
  resources:
    requests:
      cpu: 100m
      memory: 200Mi
  volumeMounts:
    - name: tmp-dir
      mountPath: /tmp
    - name: kube-api-access-x52qv
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  livenessProbe:
    httpGet:
      path: /livez
      port: https
      scheme: HTTPS
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  readinessProbe:
    httpGet:
      path: /readyz
      port: https
      scheme: HTTPS
    initialDelaySeconds: 20
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      drop:
        - ALL
    runAsUser: 1000
    runAsNonRoot: true
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false
    seccompProfile:
      type: RuntimeDefault

volumes:
  - name: tmp-dir
    emptyDir: {}
  - name: kube-api-access-x52qv
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
containers:
  - name: metrics-server
    image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
    args:
      - '--cert-dir=/tmp'
      - '--secure-port=10250'
      - '--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname'
      - '--kubelet-use-node-status-port'
      - '--metric-resolution=15s'
    ports:
      - name: https
        containerPort: 10250
        protocol: TCP
    resources:
      requests:
        cpu: 100m
        memory: 200Mi
    volumeMounts:
      - name: tmp-dir
        mountPath: /tmp
      - name: kube-api-access-x52qv
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    livenessProbe:
      httpGet:
        path: /livez
        port: https
        scheme: HTTPS
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    readinessProbe:
      httpGet:
        path: /readyz
        port: https
        scheme: HTTPS
      initialDelaySeconds: 20
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        drop:
          - ALL
      runAsUser: 1000
      runAsNonRoot: true
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      seccompProfile:
        type: RuntimeDefault
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: metrics-server
serviceAccount: metrics-server
nodeName: system-0-r5hb1
securityContext: {}
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priorityClassName: system-cluster-critical
priority: 2000000000
enableServiceLinks: true
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-23T04:47:22Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-23T04:47:52Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-23T04:47:52Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-23T04:47:22Z'
hostIP: 10.108.0.3
podIP: 10.244.0.62
podIPs:
  - ip: 10.244.0.62
startTime: '2024-07-23T04:47:22Z'
containerStatuses:
  - name: metrics-server
    state:
      running:
        startedAt: '2024-07-23T04:47:24Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
    imageID: >-
      registry.k8s.io/metrics-server/metrics-server@sha256:db3800085a0957083930c3932b17580eec652cfb6156a05c0f79c7543e80d17a
    containerID: >-
      containerd://fec2105da90e97d5c3c2b779184801644d90d5c20864372db1afb0c1a216eb51
    started: true
qosClass: Burstable

metadata:
  name: metrics-server-6d94bc8694-jjtwg
  generateName: metrics-server-6d94bc8694-
  namespace: kube-system
  uid: d35215df-9205-4f2c-871d-a3ea397a3bbf
  resourceVersion: '27462770'
  creationTimestamp: '2024-07-23T04:47:22Z'
  labels:
    k8s-app: metrics-server
    pod-template-hash: 6d94bc8694
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: metrics-server-6d94bc8694
      uid: 6ee99e26-f1b7-46a0-bdc3-03b5e015d159
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: tmp-dir
      emptyDir: {}
    - name: kube-api-access-x52qv
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  containers:
    - name: metrics-server
      image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
      args:
        - '--cert-dir=/tmp'
        - '--secure-port=10250'
        - '--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname'
        - '--kubelet-use-node-status-port'
        - '--metric-resolution=15s'
      ports:
        - name: https
          containerPort: 10250
          protocol: TCP
      resources:
        requests:
          cpu: 100m
          memory: 200Mi
      volumeMounts:
        - name: tmp-dir
          mountPath: /tmp
        - name: kube-api-access-x52qv
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      livenessProbe:
        httpGet:
          path: /livez
          port: https
          scheme: HTTPS
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      readinessProbe:
        httpGet:
          path: /readyz
          port: https
          scheme: HTTPS
        initialDelaySeconds: 20
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          drop:
            - ALL
        runAsUser: 1000
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        seccompProfile:
          type: RuntimeDefault
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: metrics-server
  serviceAccount: metrics-server
  nodeName: system-0-r5hb1
  securityContext: {}
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priorityClassName: system-cluster-critical
  priority: 2000000000
  enableServiceLinks: true
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-23T04:47:22Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-23T04:47:52Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-23T04:47:52Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-23T04:47:22Z'
  hostIP: 10.108.0.3
  podIP: 10.244.0.62
  podIPs:
    - ip: 10.244.0.62
  startTime: '2024-07-23T04:47:22Z'
  containerStatuses:
    - name: metrics-server
      state:
        running:
          startedAt: '2024-07-23T04:47:24Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: registry.k8s.io/metrics-server/metrics-server:v0.7.1
      imageID: >-
        registry.k8s.io/metrics-server/metrics-server@sha256:db3800085a0957083930c3932b17580eec652cfb6156a05c0f79c7543e80d17a
      containerID: >-
        containerd://fec2105da90e97d5c3c2b779184801644d90d5c20864372db1afb0c1a216eb51
      started: true
  qosClass: Burstable

I0723 04:47:25.469228       1 serving.go:374] Generated self-signed cert (/tmp/apiserver.crt, /tmp/apiserver.key)
I0723 04:47:25.916680       1 handler.go:275] Adding GroupVersion metrics.k8s.io v1beta1 to ResourceManager
I0723 04:47:26.035399       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
I0723 04:47:26.035502       1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController
I0723 04:47:26.035624       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0723 04:47:26.035745       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0723 04:47:26.035844       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0723 04:47:26.035882       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0723 04:47:26.036896       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/tmp/apiserver.crt::/tmp/apiserver.key"
I0723 04:47:26.037077       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0723 04:47:26.036927       1 secure_serving.go:213] Serving securely on [::]:10250
I0723 04:47:26.136456       1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController
I0723 04:47:26.136522       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0723 04:47:26.136456       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
http2: server: error reading preface from client 10.244.0.14:46390: read tcp 10.244.0.62:10250->10.244.0.14:46390: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:50782: read tcp 10.244.0.62:10250->10.244.0.14:50782: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:38790: read tcp 10.244.0.62:10250->10.244.0.14:38790: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:55896: read tcp 10.244.0.62:10250->10.244.0.14:55896: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:42934: read tcp 10.244.0.62:10250->10.244.0.14:42934: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:47690: read tcp 10.244.0.62:10250->10.244.0.14:47690: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:54368: read tcp 10.244.0.62:10250->10.244.0.14:54368: read: connection reset by peer
http2: server: error reading preface from client 10.244.0.14:56682: read tcp 10.244.0.62:10250->10.244.0.14:56682: read: connection reset by peer
E0926 18:16:30.307303       1 timeout.go:142] post-timeout activity - time-elapsed: 12.423µs, GET "/apis" result: <nil>
E0926 18:23:51.036369       1 scraper.go:147] "Failed to scrape node, timeout to access kubelet" err="Get \"https://10.108.0.3:10250/metrics/resource\": context deadline exceeded" node="system-0-r5hb1" timeout="10s"
E0926 18:24:06.029718       1 scraper.go:147] "Failed to scrape node, timeout to access kubelet" err="Get \"https://10.108.0.3:10250/metrics/resource\": context deadline exceeded" node="system-0-r5hb1" timeout="10s"
E0926 18:24:21.034387       1 scraper.go:147] "Failed to scrape node, timeout to access kubelet" err="Get \"https://10.108.0.3:10250/metrics/resource\": context deadline exceeded" node="system-0-r5hb1" timeout="10s"
E0926 18:24:36.022852       1 scraper.go:147] "Failed to scrape node, timeout to access kubelet" err="Get \"https://10.108.0.3:10250/metrics/resource\": context deadline exceeded" node="system-0-r5hb1" timeout="10s"
E0926 18:24:41.496749       1 timeout.go:142] post-timeout activity - time-elapsed: 2.568µs, GET "/apis" result: <nil>
http2: server: error reading preface from client 10.244.0.14:38254: read tcp 10.244.0.62:10250->10.244.0.14:38254: read: connection reset by peer
E1017 20:26:36.893168       1 webhook.go:253] Failed to make webhook authorizer request: Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": context deadline exceeded
E1017 20:26:36.894638       1 errors.go:77] Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": context deadline exceeded
E1017 20:26:41.833624       1 webhook.go:253] Failed to make webhook authorizer request: Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
E1017 20:26:41.833707       1 errors.go:77] Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
E1017 20:34:51.033022       1 scraper.go:147] "Failed to scrape node, timeout to access kubelet" err="Get \"https://10.108.0.2:10250/metrics/resource\": context deadline exceeded" node="system-0-bf7s0" timeout="10s"
E1018 15:01:11.669920       1 webhook.go:253] Failed to make webhook authorizer request: Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": unexpected EOF
E1018 15:01:11.670926       1 errors.go:77] Post "https://10.245.0.1:443/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s": unexpected EOF
E1031 20:40:53.989944       1 writers.go:122] apiserver was unable to write a JSON response: http: Handler timeout
E1031 20:40:53.990985       1 status.go:71] apiserver received an error that is not an metav1.Status: &errors.errorString{s:"http: Handler timeout"}: http: Handler timeout
E1031 20:40:53.991091       1 writers.go:135] apiserver was unable to write a fallback JSON response: http: Handler timeout
E1031 20:40:53.992121       1 timeout.go:142] post-timeout activity - time-elapsed: 2.417526ms, GET "/apis/metrics.k8s.io/v1beta1" result: <nil>
E1031 20:40:53.992668       1 timeout.go:142] post-timeout activity - time-elapsed: 1.342µs, GET "/apis" result: <nil>
E1031 20:40:53.993523       1 timeout.go:142] post-timeout activity - time-elapsed: 457.048µs, GET "/apis" result: <nil>
E1031 20:40:53.993838       1 writers.go:122] apiserver was unable to write a JSON response: http: Handler timeout
E1031 20:40:53.994822       1 status.go:71] apiserver received an error that is not an metav1.Status: &errors.errorString{s:"http: Handler timeout"}: http: Handler timeout
E1031 20:40:53.994999       1 writers.go:135] apiserver was unable to write a fallback JSON response: http: Handler timeout
E1031 20:40:53.996714       1 timeout.go:142] post-timeout activity - time-elapsed: 2.976956ms, GET "/apis/metrics.k8s.io/v1beta1" result: <nil>
http2: server: error reading preface from client 10.244.0.14:59886: read tcp 10.244.0.62:10250->10.244.0.14:59886: read: connection reset by peer