Name: cert-manager-cainjector-78cd5c8f8-rrns8 Namespace: cert-manager Priority: 0 Service Account: cert-manager-cainjector Node: controller/199.19.213.170 Start Time: Mon, 08 Jun 2026 09:25:06 +0000 Labels: app=cainjector app.kubernetes.io/component=cainjector app.kubernetes.io/instance=cert-manager app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=cainjector app.kubernetes.io/version=v1.11.5 helm.sh/chart=cert-manager-v1.11.5 pod-template-hash=78cd5c8f8 Annotations: Status: Running SeccompProfile: RuntimeDefault IP: 172.24.0.229 IPs: IP: 172.24.0.229 Controlled By: ReplicaSet/cert-manager-cainjector-78cd5c8f8 Containers: cert-manager-cainjector: Container ID: containerd://7cdce30233a2c01e613a23ef2dde6f34bca69dc5ecb7f5bfbb83fe86ebde39fe Image: quay.io/jetstack/cert-manager-cainjector:v1.11.5 Image ID: quay.io/jetstack/cert-manager-cainjector@sha256:eb2cbb6a04aaf7b767982822836378844a7dace3c440bdf22e20e5e45f3cff7f Port: Host Port: Args: --v=2 --leader-election-namespace=cert-manager State: Running Started: Mon, 08 Jun 2026 09:25:49 +0000 Ready: True Restart Count: 0 Environment: POD_NAMESPACE: cert-manager (v1:metadata.namespace) Mounts: /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-7gxfk (ro) Conditions: Type Status PodReadyToStartContainers True Initialized True Ready True ContainersReady True PodScheduled True Volumes: kube-api-access-7gxfk: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt Optional: false DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 4m8s default-scheduler Successfully assigned cert-manager/cert-manager-cainjector-78cd5c8f8-rrns8 to controller Warning Failed 4m7s kubelet Failed to pull image "quay.io/jetstack/cert-manager-cainjector:v1.11.5": failed to pull and unpack image "quay.io/jetstack/cert-manager-cainjector:v1.11.5": failed to copy: httpReadSeeker: failed open: unexpected status from GET request to https://quay.io/v2/jetstack/cert-manager-cainjector/blobs/sha256:70c1a8af1eaa5a8d70f280e87da6c87ef57ffdacfc781c0a4692426bfa96c036: 502 Bad Gateway Warning Failed 3m54s (x2 over 4m7s) kubelet Error: ErrImagePull Warning Failed 3m54s kubelet Failed to pull image "quay.io/jetstack/cert-manager-cainjector:v1.11.5": failed to pull and unpack image "quay.io/jetstack/cert-manager-cainjector:v1.11.5": failed to copy: httpReadSeeker: failed open: unexpected status from GET request to https://quay.io/v2/jetstack/cert-manager-cainjector/manifests/sha256:ad2caeae03b8bcdc9ac080346be6cd6fee38d5b92eaa353f564d96b7c9fd96d5: 502 Bad Gateway Normal BackOff 3m39s (x2 over 4m6s) kubelet Back-off pulling image "quay.io/jetstack/cert-manager-cainjector:v1.11.5" Warning Failed 3m39s (x2 over 4m6s) kubelet Error: ImagePullBackOff Normal Pulling 3m26s (x3 over 4m7s) kubelet Pulling image "quay.io/jetstack/cert-manager-cainjector:v1.11.5" Normal Pulled 3m25s kubelet Successfully pulled image "quay.io/jetstack/cert-manager-cainjector:v1.11.5" in 1.439s (1.439s including waiting). Image size: 12620191 bytes. Normal Created 3m25s kubelet Created container: cert-manager-cainjector Normal Started 3m25s kubelet Started container cert-manager-cainjector