Name:             cert-manager-cainjector-64b59ddb75-flptz
Namespace:        cert-manager
Priority:         0
Service Account:  cert-manager-cainjector
Node:             instance/199.204.45.141
Start Time:       Tue, 21 Apr 2026 19:18:40 +0000
Labels:           app=cainjector
                  app.kubernetes.io/component=cainjector
                  app.kubernetes.io/instance=cert-manager
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=cainjector
                  app.kubernetes.io/version=v1.11.5
                  helm.sh/chart=cert-manager-v1.11.5
                  pod-template-hash=64b59ddb75
Annotations:      <none>
Status:           Pending
SeccompProfile:   RuntimeDefault
IP:               10.0.0.154
IPs:
  IP:           10.0.0.154
Controlled By:  ReplicaSet/cert-manager-cainjector-64b59ddb75
Containers:
  cert-manager-cainjector:
    Container ID:  
    Image:         harbor.atmosphere.dev/quay.io/jetstack/cert-manager-cainjector:v1.12.17
    Image ID:      
    Port:          <none>
    Host Port:     <none>
    Args:
      --v=2
      --leader-election-namespace=cert-manager
    State:          Waiting
      Reason:       ImagePullBackOff
    Ready:          False
    Restart Count:  0
    Environment:
      POD_NAMESPACE:  cert-manager (v1:metadata.namespace)
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-g46fm (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  kube-api-access-g46fm:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              kubernetes.io/os=linux
                             openstack-control-plane=enabled
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason     Age                    From               Message
  ----     ------     ----                   ----               -------
  Normal   Scheduled  5m23s                  default-scheduler  Successfully assigned cert-manager/cert-manager-cainjector-64b59ddb75-flptz to instance
  Normal   Pulling    3m51s (x4 over 5m22s)  kubelet            Pulling image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-cainjector:v1.12.17"
  Warning  Failed     3m51s (x4 over 5m22s)  kubelet            Failed to pull image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-cainjector:v1.12.17": failed to pull and unpack image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-cainjector:v1.12.17": failed to resolve image: unexpected status from HEAD request to https://harbor.atmosphere.dev/v2/quay.io/jetstack/cert-manager-cainjector/manifests/v1.12.17: 401 Unauthorized
  Warning  Failed     3m51s (x4 over 5m22s)  kubelet            Error: ErrImagePull
  Warning  Failed     3m39s (x6 over 5m22s)  kubelet            Error: ImagePullBackOff
  Normal   BackOff    20s (x21 over 5m22s)   kubelet            Back-off pulling image "harbor.atmosphere.dev/quay.io/jetstack/cert-manager-cainjector:v1.12.17"