Name: cert-manager-webhook-548949fc64-sbcr9 Namespace: cert-manager Priority: 0 Service Account: cert-manager-webhook Node: instance/199.204.45.140 Start Time: Wed, 10 Jun 2026 02:46:08 +0000 Labels: app=webhook app.kubernetes.io/component=webhook app.kubernetes.io/instance=cert-manager app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=webhook app.kubernetes.io/version=v1.11.5 helm.sh/chart=cert-manager-v1.11.5 pod-template-hash=548949fc64 Annotations: Status: Running SeccompProfile: RuntimeDefault IP: 10.0.0.141 IPs: IP: 10.0.0.141 Controlled By: ReplicaSet/cert-manager-webhook-548949fc64 Containers: cert-manager-webhook: Container ID: containerd://5597d2cc7ea632ea8f06309b5d6e103514b1f880c9abc50595f1f8aa51213d84 Image: harbor.atmosphere.dev/quay.io/jetstack/cert-manager-webhook:v1.12.17 Image ID: harbor.atmosphere.dev/quay.io/jetstack/cert-manager-webhook@sha256:52fdb4f4cd75c4fe3bb1308d7c363bae5cfe6be425b6469722e0f9e6a65022ae Ports: 10250/TCP, 6080/TCP Host Ports: 0/TCP, 0/TCP Args: --v=2 --secure-port=10250 --feature-gates=AdditionalCertificateOutputFormats=true --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE) --dynamic-serving-ca-secret-name=cert-manager-webhook-ca --dynamic-serving-dns-names=cert-manager-webhook --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE) --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc --feature-gates=AdditionalCertificateOutputFormats=true State: Running Started: Wed, 10 Jun 2026 02:46:12 +0000 Ready: True Restart Count: 0 Liveness: http-get http://:6080/livez delay=60s timeout=1s period=10s #success=1 #failure=3 Readiness: http-get http://:6080/healthz delay=5s timeout=1s period=5s #success=1 #failure=3 Environment: POD_NAMESPACE: cert-manager (v1:metadata.namespace) Mounts: /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-9dzr9 (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: kube-api-access-9dzr9: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux openstack-control-plane=enabled Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 5m52s default-scheduler Successfully assigned cert-manager/cert-manager-webhook-548949fc64-sbcr9 to instance Normal Pulling 5m50s kubelet Pulling image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-webhook:v1.12.17" Normal Pulled 5m48s kubelet Successfully pulled image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-webhook:v1.12.17" in 1.028s (2.174s including waiting) Normal Created 5m48s kubelet Created container cert-manager-webhook Normal Started 5m48s kubelet Started container cert-manager-webhook