Name:             cert-manager-webhook-67848c867c-8294s
Namespace:        cert-manager
Priority:         0
Service Account:  cert-manager-webhook
Node:             controller/199.204.45.233
Start Time:       Sat, 09 May 2026 13:11:04 +0000
Labels:           app=webhook
                  app.kubernetes.io/component=webhook
                  app.kubernetes.io/instance=cert-manager
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=webhook
                  app.kubernetes.io/version=v1.11.5
                  helm.sh/chart=cert-manager-v1.11.5
                  pod-template-hash=67848c867c
Annotations:      <none>
Status:           Running
SeccompProfile:   RuntimeDefault
IP:               172.24.0.22
IPs:
  IP:           172.24.0.22
Controlled By:  ReplicaSet/cert-manager-webhook-67848c867c
Containers:
  cert-manager-webhook:
    Container ID:  containerd://f1e1cf06a69300959deb779b58b7bf5fbf39d66683c0acfca17df2304b6c531a
    Image:         quay.io/jetstack/cert-manager-webhook:v1.11.5
    Image ID:      quay.io/jetstack/cert-manager-webhook@sha256:3044184b6a466f92520ce547d5ef7f93d1aa1ad82e4b439290641e896d5572f7
    Ports:         10250/TCP (https), 6080/TCP (healthcheck)
    Host Ports:    0/TCP (https), 0/TCP (healthcheck)
    Args:
      --v=2
      --secure-port=10250
      --feature-gates=AdditionalCertificateOutputFormats=true
      --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
      --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
      --dynamic-serving-dns-names=cert-manager-webhook
      --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)
      --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc
      --feature-gates=AdditionalCertificateOutputFormats=true
    State:          Running
      Started:      Sat, 09 May 2026 13:11:12 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get http://:6080/livez delay=60s timeout=1s period=10s #success=1 #failure=3
    Readiness:      http-get http://:6080/healthz delay=5s timeout=1s period=5s #success=1 #failure=3
    Environment:
      POD_NAMESPACE:  cert-manager (v1:metadata.namespace)
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-2gtw8 (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  kube-api-access-2gtw8:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    Optional:                false
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              kubernetes.io/os=linux
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason       Age    From               Message
  ----     ------       ----   ----               -------
  Normal   Scheduled    3m41s  default-scheduler  Successfully assigned cert-manager/cert-manager-webhook-67848c867c-8294s to controller
  Warning  FailedMount  3m40s  kubelet            MountVolume.SetUp failed for volume "kube-api-access-2gtw8" : failed to sync configmap cache: timed out waiting for the condition
  Normal   Pulling      3m39s  kubelet            Pulling image "quay.io/jetstack/cert-manager-webhook:v1.11.5"
  Normal   Pulled       3m33s  kubelet            Successfully pulled image "quay.io/jetstack/cert-manager-webhook:v1.11.5" in 1.548s (5.455s including waiting). Image size: 14341678 bytes.
  Normal   Created      3m33s  kubelet            Created container: cert-manager-webhook
  Normal   Started      3m33s  kubelet            Started container cert-manager-webhook