Name: cert-manager-79c48d47db-6dmcx Namespace: cert-manager Priority: 0 Service Account: cert-manager Node: instance/199.204.45.156 Start Time: Thu, 02 Jul 2026 15:37:17 +0000 Labels: app=cert-manager app.kubernetes.io/component=controller app.kubernetes.io/instance=cert-manager app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=cert-manager app.kubernetes.io/version=v1.15.5 helm.sh/chart=cert-manager-v1.15.5 pod-template-hash=79c48d47db Annotations: prometheus.io/path: /metrics prometheus.io/port: 9402 prometheus.io/scrape: true Status: Running SeccompProfile: RuntimeDefault IP: 10.0.0.31 IPs: IP: 10.0.0.31 Controlled By: ReplicaSet/cert-manager-79c48d47db Containers: cert-manager-controller: Container ID: containerd://e74201e7802114f700bff2375cf0fa7bfe6f35ec730fdf7443e91b42a9b54343 Image: harbor.atmosphere.dev/quay.io/jetstack/cert-manager-controller:v1.15.5 Image ID: harbor.atmosphere.dev/quay.io/jetstack/cert-manager-controller@sha256:3f91a0ca90d1ff4ca4a2777de8e72b6299c55e1c3d83d064cd6fbc319a1f8ff4 Ports: 9402/TCP, 9403/TCP Host Ports: 0/TCP, 0/TCP Args: --v=2 --cluster-resource-namespace=$(POD_NAMESPACE) --leader-election-namespace=cert-manager --acme-http01-solver-image=harbor.atmosphere.dev/quay.io/jetstack/cert-manager-acmesolver:v1.15.5 --feature-gates=AdditionalCertificateOutputFormats=true --max-concurrent-challenges=60 State: Running Started: Thu, 02 Jul 2026 15:55:03 +0000 Last State: Terminated Reason: Error Exit Code: 1 Started: Thu, 02 Jul 2026 15:37:20 +0000 Finished: Thu, 02 Jul 2026 15:54:56 +0000 Ready: True Restart Count: 1 Liveness: http-get http://:http-healthz/livez delay=10s timeout=15s period=10s #success=1 #failure=8 Environment: POD_NAMESPACE: cert-manager (v1:metadata.namespace) Mounts: /etc/ssl/certs from etc-ssl-certs (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-6p5bl (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: etc-ssl-certs: Type: HostPath (bare host directory volume) Path: /etc/ssl/certs HostPathType: kube-api-access-6p5bl: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux openstack-control-plane=enabled Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 17m default-scheduler Successfully assigned cert-manager/cert-manager-79c48d47db-6dmcx to instance Normal Pulling 17m kubelet Pulling image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-controller:v1.15.5" Normal Pulled 17m kubelet Successfully pulled image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-controller:v1.15.5" in 1.67s (1.67s including waiting) Warning Unhealthy 9s kubelet Liveness probe failed: Get "http://10.0.0.31:9403/livez": dial tcp 10.0.0.31:9403: connect: connection refused Normal Created 3s (x2 over 17m) kubelet Created container cert-manager-controller Normal Started 3s (x2 over 17m) kubelet Started container cert-manager-controller Normal Pulled 3s kubelet Container image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-controller:v1.15.5" already present on machine