Name:             cert-manager-startupapicheck-49fg5
Namespace:        cert-manager
Priority:         0
Service Account:  cert-manager-startupapicheck
Node:             instance/199.204.45.210
Start Time:       Fri, 20 Mar 2026 10:19:03 +0000
Labels:           app=startupapicheck
                  app.kubernetes.io/component=startupapicheck
                  app.kubernetes.io/instance=cert-manager
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=startupapicheck
                  app.kubernetes.io/version=v1.11.5
                  batch.kubernetes.io/controller-uid=ca873683-0800-45dd-a4a4-0fe9fb77175c
                  batch.kubernetes.io/job-name=cert-manager-startupapicheck
                  controller-uid=ca873683-0800-45dd-a4a4-0fe9fb77175c
                  helm.sh/chart=cert-manager-v1.11.5
                  job-name=cert-manager-startupapicheck
Annotations:      <none>
Status:           Pending
SeccompProfile:   RuntimeDefault
IP:               
IPs:              <none>
Controlled By:    Job/cert-manager-startupapicheck
Containers:
  cert-manager-startupapicheck:
    Container ID:  
    Image:         harbor.atmosphere.dev/quay.io/jetstack/cert-manager-ctl:v1.12.17
    Image ID:      
    Port:          <none>
    Host Port:     <none>
    Args:
      check
      api
      --wait=1m
    State:          Waiting
      Reason:       ContainerCreating
    Ready:          False
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-42b27 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  kube-api-access-42b27:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              kubernetes.io/os=linux
                             openstack-control-plane=enabled
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason            Age   From               Message
  ----     ------            ----  ----               -------
  Warning  FailedScheduling  15s   default-scheduler  0/1 nodes are available: 1 node(s) had untolerated taint {node.cilium.io/agent-not-ready: }. preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling..
  Normal   Scheduled         12s   default-scheduler  Successfully assigned cert-manager/cert-manager-startupapicheck-49fg5 to instance
  Normal   Pulling           5s    kubelet            Pulling image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-ctl:v1.12.17"