1138 lines
47 KiB
YAML
1138 lines
47 KiB
YAML
apiVersion: v1
|
|
items:
|
|
- apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generateName: ingress-nginx-admission-create-
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
batch.kubernetes.io/controller-uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
batch.kubernetes.io/job-name: ingress-nginx-admission-create
|
|
controller-uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
job-name: ingress-nginx-admission-create
|
|
name: ingress-nginx-admission-create-npzkk
|
|
namespace: ingress-nginx
|
|
ownerReferences:
|
|
- apiVersion: batch/v1
|
|
blockOwnerDeletion: true
|
|
controller: true
|
|
kind: Job
|
|
name: ingress-nginx-admission-create
|
|
uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
resourceVersion: '12273257'
|
|
uid: a4558234-ae4f-471d-a1f0-54d7a409cd88
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- create
|
|
- --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc
|
|
- --namespace=$(POD_NAMESPACE)
|
|
- --secret-name=ingress-nginx-admission
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
imagePullPolicy: IfNotPresent
|
|
name: create
|
|
resources: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-kgll7
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
enableServiceLinks: true
|
|
nodeName: server-thinkcentre-e73
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
preemptionPolicy: PreemptLowerPriority
|
|
priority: 0
|
|
restartPolicy: OnFailure
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx-admission
|
|
serviceAccountName: ingress-nginx-admission
|
|
terminationGracePeriodSeconds: 30
|
|
tolerations:
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/not-ready
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/unreachable
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
volumes:
|
|
- name: kube-api-access-kgll7
|
|
projected:
|
|
defaultMode: 420
|
|
sources:
|
|
- serviceAccountToken:
|
|
expirationSeconds: 3607
|
|
path: token
|
|
- configMap:
|
|
items:
|
|
- key: ca.crt
|
|
path: ca.crt
|
|
name: kube-root-ca.crt
|
|
- downwardAPI:
|
|
items:
|
|
- fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
path: namespace
|
|
status:
|
|
conditions:
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:56Z'
|
|
status: 'False'
|
|
type: PodReadyToStartContainers
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'True'
|
|
type: Initialized
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'False'
|
|
type: Ready
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'False'
|
|
type: ContainersReady
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
status: 'True'
|
|
type: PodScheduled
|
|
containerStatuses:
|
|
- containerID: containerd://a6c6d92bf9be7028e8a0bb98787afb7ab3cce4bd0a9ee14c3a6e146fd651bcc4
|
|
image: sha256:aea50de662ab9fa143158df4b59095301b8b135c5da186f02c9592c80c05b13a
|
|
imageID: registry.k8s.io/ingress-nginx/kube-webhook-certgen@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
lastState: {}
|
|
name: create
|
|
ready: false
|
|
restartCount: 0
|
|
started: false
|
|
state:
|
|
terminated:
|
|
containerID: containerd://a6c6d92bf9be7028e8a0bb98787afb7ab3cce4bd0a9ee14c3a6e146fd651bcc4
|
|
exitCode: 0
|
|
finishedAt: '2025-04-28T15:36:54Z'
|
|
reason: Completed
|
|
startedAt: '2025-04-28T15:36:54Z'
|
|
volumeMounts:
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-kgll7
|
|
readOnly: true
|
|
recursiveReadOnly: Disabled
|
|
hostIP: 192.168.31.173
|
|
hostIPs:
|
|
- ip: 192.168.31.173
|
|
phase: Succeeded
|
|
qosClass: BestEffort
|
|
startTime: '2025-04-28T15:36:50Z'
|
|
- apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generateName: ingress-nginx-admission-patch-
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
batch.kubernetes.io/controller-uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
batch.kubernetes.io/job-name: ingress-nginx-admission-patch
|
|
controller-uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
job-name: ingress-nginx-admission-patch
|
|
name: ingress-nginx-admission-patch-grvbz
|
|
namespace: ingress-nginx
|
|
ownerReferences:
|
|
- apiVersion: batch/v1
|
|
blockOwnerDeletion: true
|
|
controller: true
|
|
kind: Job
|
|
name: ingress-nginx-admission-patch
|
|
uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
resourceVersion: '12273262'
|
|
uid: 1fdb3ff9-09bb-46d8-b6fe-81961b8006f9
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- patch
|
|
- --webhook-name=ingress-nginx-admission
|
|
- --namespace=$(POD_NAMESPACE)
|
|
- --patch-mutating=false
|
|
- --secret-name=ingress-nginx-admission
|
|
- --patch-failure-policy=Fail
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
imagePullPolicy: IfNotPresent
|
|
name: patch
|
|
resources: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-9jbmc
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
enableServiceLinks: true
|
|
nodeName: server-thinkcentre-e73
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
preemptionPolicy: PreemptLowerPriority
|
|
priority: 0
|
|
restartPolicy: OnFailure
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx-admission
|
|
serviceAccountName: ingress-nginx-admission
|
|
terminationGracePeriodSeconds: 30
|
|
tolerations:
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/not-ready
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/unreachable
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
volumes:
|
|
- name: kube-api-access-9jbmc
|
|
projected:
|
|
defaultMode: 420
|
|
sources:
|
|
- serviceAccountToken:
|
|
expirationSeconds: 3607
|
|
path: token
|
|
- configMap:
|
|
items:
|
|
- key: ca.crt
|
|
path: ca.crt
|
|
name: kube-root-ca.crt
|
|
- downwardAPI:
|
|
items:
|
|
- fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
path: namespace
|
|
status:
|
|
conditions:
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:56Z'
|
|
status: 'False'
|
|
type: PodReadyToStartContainers
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'True'
|
|
type: Initialized
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'False'
|
|
type: Ready
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
reason: PodCompleted
|
|
status: 'False'
|
|
type: ContainersReady
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
status: 'True'
|
|
type: PodScheduled
|
|
containerStatuses:
|
|
- containerID: containerd://14a7fddb173daa8b28be1a3bdb51b28e2a67171ca56dffa647815c28bd9ffc08
|
|
image: sha256:aea50de662ab9fa143158df4b59095301b8b135c5da186f02c9592c80c05b13a
|
|
imageID: registry.k8s.io/ingress-nginx/kube-webhook-certgen@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
lastState: {}
|
|
name: patch
|
|
ready: false
|
|
restartCount: 0
|
|
started: false
|
|
state:
|
|
terminated:
|
|
containerID: containerd://14a7fddb173daa8b28be1a3bdb51b28e2a67171ca56dffa647815c28bd9ffc08
|
|
exitCode: 0
|
|
finishedAt: '2025-04-28T15:36:54Z'
|
|
reason: Completed
|
|
startedAt: '2025-04-28T15:36:54Z'
|
|
volumeMounts:
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-9jbmc
|
|
readOnly: true
|
|
recursiveReadOnly: Disabled
|
|
hostIP: 192.168.31.173
|
|
hostIPs:
|
|
- ip: 192.168.31.173
|
|
phase: Succeeded
|
|
qosClass: BestEffort
|
|
startTime: '2025-04-28T15:36:50Z'
|
|
- apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generateName: ingress-nginx-controller-665b599bc5-
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
pod-template-hash: 665b599bc5
|
|
name: ingress-nginx-controller-665b599bc5-wzj88
|
|
namespace: ingress-nginx
|
|
ownerReferences:
|
|
- apiVersion: apps/v1
|
|
blockOwnerDeletion: true
|
|
controller: true
|
|
kind: ReplicaSet
|
|
name: ingress-nginx-controller-665b599bc5
|
|
uid: c0882270-c953-4732-8126-bec666da185d
|
|
resourceVersion: '20356548'
|
|
uid: c0bcc1f1-00b0-4c0f-8f1d-84a39c774486
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- /nginx-ingress-controller
|
|
- --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --election-id=ingress-nginx-leader
|
|
- --controller-class=k8s.io/ingress-nginx
|
|
- --ingress-class=nginx
|
|
- --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --validating-webhook=:8443
|
|
- --validating-webhook-certificate=/usr/local/certificates/cert
|
|
- --validating-webhook-key=/usr/local/certificates/key
|
|
env:
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
- name: LD_PRELOAD
|
|
value: /usr/local/lib/libmimalloc.so
|
|
image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
|
|
imagePullPolicy: IfNotPresent
|
|
lifecycle:
|
|
preStop:
|
|
exec:
|
|
command:
|
|
- /wait-shutdown
|
|
livenessProbe:
|
|
failureThreshold: 5
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
name: controller
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
protocol: TCP
|
|
- containerPort: 443
|
|
name: https
|
|
protocol: TCP
|
|
- containerPort: 8443
|
|
name: webhook
|
|
protocol: TCP
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 90Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false
|
|
runAsGroup: 82
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /usr/local/certificates/
|
|
name: webhook-cert
|
|
readOnly: true
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-7bbd2
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
enableServiceLinks: true
|
|
nodeName: server-thinkcentre-e73
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
preemptionPolicy: PreemptLowerPriority
|
|
priority: 0
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx
|
|
serviceAccountName: ingress-nginx
|
|
terminationGracePeriodSeconds: 300
|
|
tolerations:
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/not-ready
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
- effect: NoExecute
|
|
key: node.kubernetes.io/unreachable
|
|
operator: Exists
|
|
tolerationSeconds: 300
|
|
volumes:
|
|
- name: webhook-cert
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: ingress-nginx-admission
|
|
- name: kube-api-access-7bbd2
|
|
projected:
|
|
defaultMode: 420
|
|
sources:
|
|
- serviceAccountToken:
|
|
expirationSeconds: 3607
|
|
path: token
|
|
- configMap:
|
|
items:
|
|
- key: ca.crt
|
|
path: ca.crt
|
|
name: kube-root-ca.crt
|
|
- downwardAPI:
|
|
items:
|
|
- fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
path: namespace
|
|
status:
|
|
conditions:
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-08-24T01:02:03Z'
|
|
status: 'True'
|
|
type: PodReadyToStartContainers
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
status: 'True'
|
|
type: Initialized
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-08-24T01:02:13Z'
|
|
status: 'True'
|
|
type: Ready
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-08-24T01:02:13Z'
|
|
status: 'True'
|
|
type: ContainersReady
|
|
- lastProbeTime: null
|
|
lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
status: 'True'
|
|
type: PodScheduled
|
|
containerStatuses:
|
|
- containerID: containerd://0705d81899dfee90c05bfc06965a43f80312910606da7747793c64f6a25cdf40
|
|
image: sha256:78e25eaa557d48a19963cbe751b91dc1d53e1c82aad6cd36c20e1c11eb04cd13
|
|
imageID: registry.k8s.io/ingress-nginx/controller@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
|
|
lastState:
|
|
terminated:
|
|
containerID: containerd://6bbf8a67b813dc8c153fc4c8c274dd60e378cf25483370f7b4062ffa053cbc33
|
|
exitCode: 255
|
|
finishedAt: '2025-08-24T01:01:44Z'
|
|
reason: Unknown
|
|
startedAt: '2025-08-12T14:09:32Z'
|
|
name: controller
|
|
ready: true
|
|
restartCount: 18
|
|
started: true
|
|
state:
|
|
running:
|
|
startedAt: '2025-08-24T01:02:03Z'
|
|
volumeMounts:
|
|
- mountPath: /usr/local/certificates/
|
|
name: webhook-cert
|
|
readOnly: true
|
|
recursiveReadOnly: Disabled
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: kube-api-access-7bbd2
|
|
readOnly: true
|
|
recursiveReadOnly: Disabled
|
|
hostIP: 192.168.31.54
|
|
hostIPs:
|
|
- ip: 192.168.31.54
|
|
phase: Running
|
|
podIP: 10.244.0.38
|
|
podIPs:
|
|
- ip: 10.244.0.38
|
|
qosClass: Burstable
|
|
startTime: '2025-04-28T15:36:50Z'
|
|
- apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
annotations:
|
|
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-controller","namespace":"ingress-nginx"},"spec":{"externalTrafficPolicy":"Local","ipFamilies":["IPv4"],"ipFamilyPolicy":"SingleStack","ports":[{"appProtocol":"http","name":"http","port":80,"protocol":"TCP","targetPort":"http"},{"appProtocol":"https","name":"https","port":443,"protocol":"TCP","targetPort":"https"}],"selector":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx"},"type":"LoadBalancer"}}
|
|
|
|
'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
name: ingress-nginx-controller
|
|
namespace: ingress-nginx
|
|
resourceVersion: '540241'
|
|
uid: be891d4d-b00f-4b23-b0b5-28135dad560f
|
|
spec:
|
|
clusterIP: 10.105.59.125
|
|
clusterIPs:
|
|
- 10.105.59.125
|
|
externalTrafficPolicy: Local
|
|
internalTrafficPolicy: Cluster
|
|
ipFamilies:
|
|
- IPv4
|
|
ipFamilyPolicy: SingleStack
|
|
ports:
|
|
- appProtocol: http
|
|
name: http
|
|
nodePort: 31395
|
|
port: 80
|
|
protocol: TCP
|
|
targetPort: http
|
|
- appProtocol: https
|
|
name: https
|
|
nodePort: 32153
|
|
port: 443
|
|
protocol: TCP
|
|
targetPort: https
|
|
selector:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
sessionAffinity: None
|
|
type: NodePort
|
|
status:
|
|
loadBalancer: {}
|
|
- apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
annotations:
|
|
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-controller-admission","namespace":"ingress-nginx"},"spec":{"ports":[{"appProtocol":"https","name":"https-webhook","port":443,"targetPort":"webhook"}],"selector":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx"},"type":"ClusterIP"}}
|
|
|
|
'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
name: ingress-nginx-controller-admission
|
|
namespace: ingress-nginx
|
|
resourceVersion: '539419'
|
|
uid: 32e3914f-47fe-4b18-b3ba-73560027382a
|
|
spec:
|
|
clusterIP: 10.105.239.16
|
|
clusterIPs:
|
|
- 10.105.239.16
|
|
internalTrafficPolicy: Cluster
|
|
ipFamilies:
|
|
- IPv4
|
|
ipFamilyPolicy: SingleStack
|
|
ports:
|
|
- appProtocol: https
|
|
name: https-webhook
|
|
port: 443
|
|
protocol: TCP
|
|
targetPort: webhook
|
|
selector:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
annotations:
|
|
deployment.kubernetes.io/revision: '1'
|
|
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-controller","namespace":"ingress-nginx"},"spec":{"minReadySeconds":0,"revisionHistoryLimit":10,"selector":{"matchLabels":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx"}},"strategy":{"rollingUpdate":{"maxUnavailable":1},"type":"RollingUpdate"},"template":{"metadata":{"labels":{"app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"}},"spec":{"containers":[{"args":["/nginx-ingress-controller","--publish-service=$(POD_NAMESPACE)/ingress-nginx-controller","--election-id=ingress-nginx-leader","--controller-class=k8s.io/ingress-nginx","--ingress-class=nginx","--configmap=$(POD_NAMESPACE)/ingress-nginx-controller","--validating-webhook=:8443","--validating-webhook-certificate=/usr/local/certificates/cert","--validating-webhook-key=/usr/local/certificates/key"],"env":[{"name":"POD_NAME","valueFrom":{"fieldRef":{"fieldPath":"metadata.name"}}},{"name":"POD_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.namespace"}}},{"name":"LD_PRELOAD","value":"/usr/local/lib/libmimalloc.so"}],"image":"registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b","imagePullPolicy":"IfNotPresent","lifecycle":{"preStop":{"exec":{"command":["/wait-shutdown"]}}},"livenessProbe":{"failureThreshold":5,"httpGet":{"path":"/healthz","port":10254,"scheme":"HTTP"},"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"name":"controller","ports":[{"containerPort":80,"name":"http","protocol":"TCP"},{"containerPort":443,"name":"https","protocol":"TCP"},{"containerPort":8443,"name":"webhook","protocol":"TCP"}],"readinessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":10254,"scheme":"HTTP"},"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"resources":{"requests":{"cpu":"100m","memory":"90Mi"}},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"add":["NET_BIND_SERVICE"],"drop":["ALL"]},"readOnlyRootFilesystem":false,"runAsGroup":82,"runAsNonRoot":true,"runAsUser":101,"seccompProfile":{"type":"RuntimeDefault"}},"volumeMounts":[{"mountPath":"/usr/local/certificates/","name":"webhook-cert","readOnly":true}]}],"dnsPolicy":"ClusterFirst","nodeSelector":{"kubernetes.io/os":"linux"},"serviceAccountName":"ingress-nginx","terminationGracePeriodSeconds":300,"volumes":[{"name":"webhook-cert","secret":{"secretName":"ingress-nginx-admission"}}]}}}}
|
|
|
|
'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generation: 1
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
name: ingress-nginx-controller
|
|
namespace: ingress-nginx
|
|
resourceVersion: '12273732'
|
|
uid: 7e03d935-5c17-47a5-a8e5-eb395a35e9a8
|
|
spec:
|
|
progressDeadlineSeconds: 600
|
|
replicas: 1
|
|
revisionHistoryLimit: 10
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
strategy:
|
|
rollingUpdate:
|
|
maxSurge: 25%
|
|
maxUnavailable: 1
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- /nginx-ingress-controller
|
|
- --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --election-id=ingress-nginx-leader
|
|
- --controller-class=k8s.io/ingress-nginx
|
|
- --ingress-class=nginx
|
|
- --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --validating-webhook=:8443
|
|
- --validating-webhook-certificate=/usr/local/certificates/cert
|
|
- --validating-webhook-key=/usr/local/certificates/key
|
|
env:
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
- name: LD_PRELOAD
|
|
value: /usr/local/lib/libmimalloc.so
|
|
image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
|
|
imagePullPolicy: IfNotPresent
|
|
lifecycle:
|
|
preStop:
|
|
exec:
|
|
command:
|
|
- /wait-shutdown
|
|
livenessProbe:
|
|
failureThreshold: 5
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
name: controller
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
protocol: TCP
|
|
- containerPort: 443
|
|
name: https
|
|
protocol: TCP
|
|
- containerPort: 8443
|
|
name: webhook
|
|
protocol: TCP
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 90Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false
|
|
runAsGroup: 82
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /usr/local/certificates/
|
|
name: webhook-cert
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx
|
|
serviceAccountName: ingress-nginx
|
|
terminationGracePeriodSeconds: 300
|
|
volumes:
|
|
- name: webhook-cert
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: ingress-nginx-admission
|
|
status:
|
|
availableReplicas: 1
|
|
conditions:
|
|
- lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
lastUpdateTime: '2025-04-28T15:36:50Z'
|
|
message: Deployment has minimum availability.
|
|
reason: MinimumReplicasAvailable
|
|
status: 'True'
|
|
type: Available
|
|
- lastTransitionTime: '2025-04-28T15:36:50Z'
|
|
lastUpdateTime: '2025-04-28T15:37:16Z'
|
|
message: ReplicaSet "ingress-nginx-controller-665b599bc5" has successfully
|
|
progressed.
|
|
reason: NewReplicaSetAvailable
|
|
status: 'True'
|
|
type: Progressing
|
|
observedGeneration: 1
|
|
readyReplicas: 1
|
|
replicas: 1
|
|
updatedReplicas: 1
|
|
- apiVersion: apps/v1
|
|
kind: ReplicaSet
|
|
metadata:
|
|
annotations:
|
|
deployment.kubernetes.io/desired-replicas: '1'
|
|
deployment.kubernetes.io/max-replicas: '2'
|
|
deployment.kubernetes.io/revision: '1'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generation: 1
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
pod-template-hash: 665b599bc5
|
|
name: ingress-nginx-controller-665b599bc5
|
|
namespace: ingress-nginx
|
|
ownerReferences:
|
|
- apiVersion: apps/v1
|
|
blockOwnerDeletion: true
|
|
controller: true
|
|
kind: Deployment
|
|
name: ingress-nginx-controller
|
|
uid: 7e03d935-5c17-47a5-a8e5-eb395a35e9a8
|
|
resourceVersion: '12273715'
|
|
uid: c0882270-c953-4732-8126-bec666da185d
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
pod-template-hash: 665b599bc5
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
pod-template-hash: 665b599bc5
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- /nginx-ingress-controller
|
|
- --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --election-id=ingress-nginx-leader
|
|
- --controller-class=k8s.io/ingress-nginx
|
|
- --ingress-class=nginx
|
|
- --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
|
|
- --validating-webhook=:8443
|
|
- --validating-webhook-certificate=/usr/local/certificates/cert
|
|
- --validating-webhook-key=/usr/local/certificates/key
|
|
env:
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
- name: LD_PRELOAD
|
|
value: /usr/local/lib/libmimalloc.so
|
|
image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
|
|
imagePullPolicy: IfNotPresent
|
|
lifecycle:
|
|
preStop:
|
|
exec:
|
|
command:
|
|
- /wait-shutdown
|
|
livenessProbe:
|
|
failureThreshold: 5
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
name: controller
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
protocol: TCP
|
|
- containerPort: 443
|
|
name: https
|
|
protocol: TCP
|
|
- containerPort: 8443
|
|
name: webhook
|
|
protocol: TCP
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 90Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false
|
|
runAsGroup: 82
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /usr/local/certificates/
|
|
name: webhook-cert
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx
|
|
serviceAccountName: ingress-nginx
|
|
terminationGracePeriodSeconds: 300
|
|
volumes:
|
|
- name: webhook-cert
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: ingress-nginx-admission
|
|
status:
|
|
availableReplicas: 1
|
|
fullyLabeledReplicas: 1
|
|
observedGeneration: 1
|
|
readyReplicas: 1
|
|
replicas: 1
|
|
- apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
annotations:
|
|
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"batch/v1","kind":"Job","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"admission-webhook","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-admission-create","namespace":"ingress-nginx"},"spec":{"template":{"metadata":{"labels":{"app.kubernetes.io/component":"admission-webhook","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-admission-create"},"spec":{"containers":[{"args":["create","--host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc","--namespace=$(POD_NAMESPACE)","--secret-name=ingress-nginx-admission"],"env":[{"name":"POD_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.namespace"}}}],"image":"registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea","imagePullPolicy":"IfNotPresent","name":"create","securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}}}],"nodeSelector":{"kubernetes.io/os":"linux"},"restartPolicy":"OnFailure","serviceAccountName":"ingress-nginx-admission"}}}}
|
|
|
|
'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generation: 1
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
name: ingress-nginx-admission-create
|
|
namespace: ingress-nginx
|
|
resourceVersion: '539484'
|
|
uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
spec:
|
|
backoffLimit: 6
|
|
completionMode: NonIndexed
|
|
completions: 1
|
|
manualSelector: false
|
|
parallelism: 1
|
|
podReplacementPolicy: TerminatingOrFailed
|
|
selector:
|
|
matchLabels:
|
|
batch.kubernetes.io/controller-uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
suspend: false
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
batch.kubernetes.io/controller-uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
batch.kubernetes.io/job-name: ingress-nginx-admission-create
|
|
controller-uid: 8fcf7fdf-921d-4bd5-b42f-0f0869f5e832
|
|
job-name: ingress-nginx-admission-create
|
|
name: ingress-nginx-admission-create
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- create
|
|
- --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc
|
|
- --namespace=$(POD_NAMESPACE)
|
|
- --secret-name=ingress-nginx-admission
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
imagePullPolicy: IfNotPresent
|
|
name: create
|
|
resources: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
dnsPolicy: ClusterFirst
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
restartPolicy: OnFailure
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx-admission
|
|
serviceAccountName: ingress-nginx-admission
|
|
terminationGracePeriodSeconds: 30
|
|
status:
|
|
completionTime: '2025-04-28T15:36:57Z'
|
|
conditions:
|
|
- lastProbeTime: '2025-04-28T15:36:57Z'
|
|
lastTransitionTime: '2025-04-28T15:36:57Z'
|
|
message: Reached expected number of succeeded pods
|
|
reason: CompletionsReached
|
|
status: 'True'
|
|
type: SuccessCriteriaMet
|
|
- lastProbeTime: '2025-04-28T15:36:57Z'
|
|
lastTransitionTime: '2025-04-28T15:36:57Z'
|
|
message: Reached expected number of succeeded pods
|
|
reason: CompletionsReached
|
|
status: 'True'
|
|
type: Complete
|
|
ready: 0
|
|
startTime: '2025-04-28T15:36:50Z'
|
|
succeeded: 1
|
|
terminating: 0
|
|
uncountedTerminatedPods: {}
|
|
- apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
annotations:
|
|
kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"batch/v1","kind":"Job","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"admission-webhook","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-admission-patch","namespace":"ingress-nginx"},"spec":{"template":{"metadata":{"labels":{"app.kubernetes.io/component":"admission-webhook","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","app.kubernetes.io/part-of":"ingress-nginx","app.kubernetes.io/version":"1.12.1"},"name":"ingress-nginx-admission-patch"},"spec":{"containers":[{"args":["patch","--webhook-name=ingress-nginx-admission","--namespace=$(POD_NAMESPACE)","--patch-mutating=false","--secret-name=ingress-nginx-admission","--patch-failure-policy=Fail"],"env":[{"name":"POD_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.namespace"}}}],"image":"registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea","imagePullPolicy":"IfNotPresent","name":"patch","securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}}}],"nodeSelector":{"kubernetes.io/os":"linux"},"restartPolicy":"OnFailure","serviceAccountName":"ingress-nginx-admission"}}}}
|
|
|
|
'
|
|
creationTimestamp: '2025-04-28T15:36:50Z'
|
|
generation: 1
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
name: ingress-nginx-admission-patch
|
|
namespace: ingress-nginx
|
|
resourceVersion: '539481'
|
|
uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
spec:
|
|
backoffLimit: 6
|
|
completionMode: NonIndexed
|
|
completions: 1
|
|
manualSelector: false
|
|
parallelism: 1
|
|
podReplacementPolicy: TerminatingOrFailed
|
|
selector:
|
|
matchLabels:
|
|
batch.kubernetes.io/controller-uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
suspend: false
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
app.kubernetes.io/component: admission-webhook
|
|
app.kubernetes.io/instance: ingress-nginx
|
|
app.kubernetes.io/name: ingress-nginx
|
|
app.kubernetes.io/part-of: ingress-nginx
|
|
app.kubernetes.io/version: 1.12.1
|
|
batch.kubernetes.io/controller-uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
batch.kubernetes.io/job-name: ingress-nginx-admission-patch
|
|
controller-uid: abde6d32-68e5-4dff-973d-c5924fd290b9
|
|
job-name: ingress-nginx-admission-patch
|
|
name: ingress-nginx-admission-patch
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- patch
|
|
- --webhook-name=ingress-nginx-admission
|
|
- --namespace=$(POD_NAMESPACE)
|
|
- --patch-mutating=false
|
|
- --secret-name=ingress-nginx-admission
|
|
- --patch-failure-policy=Fail
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
|
|
imagePullPolicy: IfNotPresent
|
|
name: patch
|
|
resources: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
dnsPolicy: ClusterFirst
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
restartPolicy: OnFailure
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ingress-nginx-admission
|
|
serviceAccountName: ingress-nginx-admission
|
|
terminationGracePeriodSeconds: 30
|
|
status:
|
|
completionTime: '2025-04-28T15:36:57Z'
|
|
conditions:
|
|
- lastProbeTime: '2025-04-28T15:36:57Z'
|
|
lastTransitionTime: '2025-04-28T15:36:57Z'
|
|
message: Reached expected number of succeeded pods
|
|
reason: CompletionsReached
|
|
status: 'True'
|
|
type: SuccessCriteriaMet
|
|
- lastProbeTime: '2025-04-28T15:36:57Z'
|
|
lastTransitionTime: '2025-04-28T15:36:57Z'
|
|
message: Reached expected number of succeeded pods
|
|
reason: CompletionsReached
|
|
status: 'True'
|
|
type: Complete
|
|
ready: 0
|
|
startTime: '2025-04-28T15:36:50Z'
|
|
succeeded: 1
|
|
terminating: 0
|
|
uncountedTerminatedPods: {}
|
|
kind: List
|
|
metadata: {}
|