Name: kube-proxy-kjc6n Namespace: kube-system Priority: 2000001000 Priority Class Name: system-node-critical Service Account: kube-proxy Node: controller-3/199.19.213.166 Start Time: Mon, 06 Jul 2026 14:28:59 +0000 Labels: controller-revision-hash=6f475c7966 k8s-app=kube-proxy pod-template-generation=2 Annotations: Status: Running IP: 199.19.213.166 IPs: IP: 199.19.213.166 Controlled By: DaemonSet/kube-proxy Containers: kube-proxy: Container ID: containerd://5829aa7672ac669cf3bc26e2e49a7aaedc8aeccd766f04cd04596d251a186e31 Image: registry.k8s.io/kube-proxy:v1.34.0 Image ID: registry.k8s.io/kube-proxy@sha256:364da8a25c742d7a35e9635cb8cf42c1faf5b367760d0f9f9a75bdd1f9d52067 Port: Host Port: Command: /usr/local/bin/kube-proxy --config=/var/lib/kube-proxy/config.conf --hostname-override=$(NODE_NAME) State: Running Started: Mon, 06 Jul 2026 14:29:01 +0000 Ready: True Restart Count: 0 Environment: NODE_NAME: (v1:spec.nodeName) Mounts: /lib/modules from lib-modules (ro) /run/xtables.lock from xtables-lock (rw) /var/lib/kube-proxy from kube-proxy (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-wxd7k (ro) Conditions: Type Status PodReadyToStartContainers True Initialized True Ready True ContainersReady True PodScheduled True Volumes: kube-proxy: Type: ConfigMap (a volume populated by a ConfigMap) Name: kube-proxy Optional: false xtables-lock: Type: HostPath (bare host directory volume) Path: /run/xtables.lock HostPathType: FileOrCreate lib-modules: Type: HostPath (bare host directory volume) Path: /lib/modules HostPathType: kube-api-access-wxd7k: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt Optional: false DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux Tolerations: op=Exists node.kubernetes.io/disk-pressure:NoSchedule op=Exists node.kubernetes.io/memory-pressure:NoSchedule op=Exists node.kubernetes.io/network-unavailable:NoSchedule op=Exists node.kubernetes.io/not-ready:NoExecute op=Exists node.kubernetes.io/pid-pressure:NoSchedule op=Exists node.kubernetes.io/unreachable:NoExecute op=Exists node.kubernetes.io/unschedulable:NoSchedule op=Exists Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 3m12s default-scheduler Successfully assigned kube-system/kube-proxy-kjc6n to controller-3 Normal Pulled 3m11s kubelet Container image "registry.k8s.io/kube-proxy:v1.34.0" already present on machine Normal Created 3m10s kubelet Created container: kube-proxy Normal Started 3m9s kubelet Started container kube-proxy Warning FailedMount 2m24s kubelet MountVolume.SetUp failed for volume "kube-api-access-wxd7k" : failed to fetch token: Post "https://199.19.213.166:6443/api/v1/namespaces/kube-system/serviceaccounts/kube-proxy/token": unexpected EOF Warning FailedMount 2m24s kubelet MountVolume.SetUp failed for volume "kube-api-access-wxd7k" : failed to fetch token: Post "https://199.19.213.166:6443/api/v1/namespaces/kube-system/serviceaccounts/kube-proxy/token": dial tcp 199.19.213.166:6443: connect: connection refused Warning FailedMount 2m21s kubelet MountVolume.SetUp failed for volume "kube-api-access-wxd7k" : failed to fetch token: serviceaccounts "kube-proxy" is forbidden: User "system:node:controller-3" cannot create resource "serviceaccounts/token" in API group "" in the namespace "kube-system": no relationship found between node 'controller-3' and this object