Name: cert-manager-webhook-67848c867c-w5bbv Namespace: cert-manager Priority: 0 Service Account: cert-manager-webhook Node: controller/199.204.45.233 Start Time: Wed, 01 Apr 2026 10:17:08 +0000 Labels: app=webhook app.kubernetes.io/component=webhook app.kubernetes.io/instance=cert-manager app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=webhook app.kubernetes.io/version=v1.11.5 helm.sh/chart=cert-manager-v1.11.5 pod-template-hash=67848c867c Annotations: Status: Running SeccompProfile: RuntimeDefault IP: 172.24.0.1 IPs: IP: 172.24.0.1 Controlled By: ReplicaSet/cert-manager-webhook-67848c867c Containers: cert-manager-webhook: Container ID: containerd://9895df081d9070c26c9229b7a73afb1466ea3df20b1aba602a3ea500a0cf54df Image: quay.io/jetstack/cert-manager-webhook:v1.11.5 Image ID: quay.io/jetstack/cert-manager-webhook@sha256:3044184b6a466f92520ce547d5ef7f93d1aa1ad82e4b439290641e896d5572f7 Ports: 10250/TCP (https), 6080/TCP (healthcheck) Host Ports: 0/TCP (https), 0/TCP (healthcheck) Args: --v=2 --secure-port=10250 --feature-gates=AdditionalCertificateOutputFormats=true --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE) --dynamic-serving-ca-secret-name=cert-manager-webhook-ca --dynamic-serving-dns-names=cert-manager-webhook --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE) --dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc --feature-gates=AdditionalCertificateOutputFormats=true State: Running Started: Wed, 01 Apr 2026 10:17:16 +0000 Ready: True Restart Count: 0 Liveness: http-get http://:6080/livez delay=60s timeout=1s period=10s #success=1 #failure=3 Readiness: http-get http://:6080/healthz delay=5s timeout=1s period=5s #success=1 #failure=3 Environment: POD_NAMESPACE: cert-manager (v1:metadata.namespace) Mounts: /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-sktks (ro) Conditions: Type Status PodReadyToStartContainers True Initialized True Ready True ContainersReady True PodScheduled True Volumes: kube-api-access-sktks: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt Optional: false DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 4m14s default-scheduler Successfully assigned cert-manager/cert-manager-webhook-67848c867c-w5bbv to controller Normal Pulling 4m13s kubelet Pulling image "quay.io/jetstack/cert-manager-webhook:v1.11.5" Normal Pulled 4m7s kubelet Successfully pulled image "quay.io/jetstack/cert-manager-webhook:v1.11.5" in 1.798s (6.419s including waiting). Image size: 14341678 bytes. Normal Created 4m7s kubelet Created container: cert-manager-webhook Normal Started 4m6s kubelet Started container cert-manager-webhook